Instructure Data Breach
Last Updated on May 5, 2026
At A Glance
- What's Going On?
- Attorneys need to hear from people affected by the Instructure data breach as they investigate whether a class action lawsuit can be filed.
- What You Can Do
- If you believe your information may have been compromised in the Instructure data breach, fill out the form on this page to learn more about the investigation and how you can help.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the Instructure breach.
Instructure Data Breach: Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Instructure data breach.
As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including Canvas, Mastery, and Parchment users.
Instructure Security Incident: What Happened?
Instructure, the edtech company that runs Canvas, a learning management system used by tens of millions globally, has confirmed a data breach.
On May 1, 2026, Chief Information Security Officer Steve Proud confirmed the Instructure data breach, issuing a statement the following day, preliminarily concluding that the breach involved names, email addresses, student ID numbers, and messages exchanged among users.
A May 3 post on Ransomware.Live indicates that threat actor ShinyHunters took credit for the data breach. Ransomware.Live’s post shows that ShinyHunters claims to have exfiltrated over 3.65TB of data, affecting 9,000 educational institutions and 275 million students, teachers, and staff. ShinyHunters’ statement indicates that billions of private messages with personal information were also compromised.
Instructure plans to notify affected institutions of any updates regarding the compromised information as its investigation continues.
In addition to Canvas, Instructure offers assessment platform Mastery and record management system Parchment to K-12, higher education, business, and government clients.
What You Can Do After the Instructure Data Breach
If your information was exposed in the Instructure data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.
A successful case could also force Instructure to ensure they take proper steps to protect the information they were entrusted with.
Affected by the Instructure data breach? Fill out the form on this page today.
Take Action
If you believe your information was exposed in the Instructure data breach, fill out the form on this page to get in touch with us.
An attorney or legal representative may then reach out to you to explain more about this investigation and ask you a few questions.
Remember, there is no cost to get in touch, and you are under no obligation to take action after speaking to someone.
Published: May 5, 2026
Before commenting, please review our comment policy.
The information submitted on this page will be forwarded to Bryson Harris Suciu & DeMay PLLC who has sponsored this investigation.
Featured In:
Who Is ClassAction.org?
ClassAction.org is a group of online professionals who are committed to exposing corporate wrongdoing and giving consumers the tools they need to fight back.
We've been reporting on the legal space for nearly a decade and have built relationships with class action and mass tort attorneys across the country.
