How to Protect Yourself and Your Business From the Canvas Data Breach
- Burton Kelso, Tech Expert
- May 5
- 4 min read
Data breaches are accelerating at an unprecedented rate, with this year seeing some of the largest, most disruptive leaks in history. Now we are in the middle of another data breach, and this time, the clock is ticking. The hacker group ShinyHunters, the same group that previously targeted Ticketmaster and AT&T, has added Amtrak, ADT, Cisco, the European Commission, and another school platform called Infinite Campus, and now Instructure, the parent company of Canvas, to its hit list. They have issued a terrifying ultimatum: Pay the ransom by Wednesday, May 6, 2026, or the names and private data of 275 million users will be released to the public. If you use Canvas to run your business, tutor students, or manage training, this countdown changes everything for you. Here's what you need to know:
What is Canvas? At its core, Canvas is a Learning Management System that is a Digital Headquarters for any kind of teaching. It provides a structured space to host videos, assign tasks, grade work, and communicate with students or employees. Individual educators like private tutors, language coaches, or fitness experts often use the "Free-for-Teacher" version of Canvas. Small businesses typically use Canvas Career or Canvas Plus for internal and external training. It acts as a legal paper trail, proving that employees have completed mandatory safety or harassment training. Schools use it
ShinyHunters claims to have billions of private messages. Their pattern is the same every time they hack into a company. Steal the data. Post a countdown. Demand payment. Leak everything if they don’t get it. For individuals, small businesses, and schools, this could mean the leak of proprietary course materials, private student feedback, or sensitive business discussions. Once names are released, hackers will have a verified list of active users. Expect a surge in highly targeted "spear-phishing" attacks specifically designed to look like they are coming from the Canvas support team.
What you need to do now.
With the deadline set for May 6, you have a very narrow window to secure your digital footprint. If you are a private coach or small academy, or a school, your students trust you with their data. You need to be the one who tells them about this, not the news.
Assume that every message you have sent inside the Canvas "Inbox" since late 2025 is now public. If you’ve ever sent a password, a private Zoom link, or sensitive files through the Canvas messenger, change those passwords and deactivate those links immediately.
Log in to your Canvas account and re-authorize any third-party apps. This ensures you are using a new, secure connection that the hackers can't intercept.
Warn your clients and staff that the next 72 hours will be the most dangerous for phishing. Send a quick update to your students. Tell them: "Canvas is experiencing a security incident. We will NEVER ask you for your password or payment details via a link in an email. If you receive a message like this, delete it immediately."
Other things you need to do:
If you are still using a standard password for your individual and business accounts, you are vulnerable. Switch to Passkeys. Even if a hacker has your email and name from this leak, they cannot access your account without your physical biometrics.
Freeze your credit. This is the single best thing you can do to stop identity theft cold. It’s free, takes 10 minutes, and locks crooks out from opening accounts in your name.
Turn on two-factor authentication. On your email, your kid’s email, your school accounts, and your bank.
The countdown expires on May 6. Whether Instructure pays the ransom or not, the security through obscurity era for Canvas users is over. By taking these steps now, you protect your personal information and your small business's reputation and show your clients that you take their privacy more seriously than the big corporations do.
If you found this tech tip helpful, forward this blog to a friend or family member or use the share icons below now. If you have any questions, please reach out via email or on social media. I'm always available.
About Burton Kelso. Burton Kelso is an internationally recognized 2x TEDx Technology Keynote Speaker and Consumer/Small Business Tech Expert dedicated to making the complexities of the digital world accessible and secure. With over 30 years of experience in the trenches of cybersecurity, digital marketing, and AI ethics, Burton has become a trusted voice for organizations seeking to navigate the rapidly evolving tech landscape. As a high-energy corporate trainer and event speaker, Burton specializes in translating "geek speak" into actionable strategies for leadership teams, small business owners, and everyday consumers. He is a frequent media contributor, providing expert commentary on national and global news outlets regarding AI safety, digital wellness, and cyber-threat mitigation.
Whether he is delivering a virtual workshop or a mainstage keynote, Burton’s mission is to empower audiences to use technology as a tool for growth—not a source of stress.
Looking to book Burton for your next conference or corporate event? Explore Speaking Topics & Availability Here.
Looking for More Useful Tech Tips? If you like video tips, I LIVE STREAM new episodes of 'Computer and Tech Tips for Non-Tech People' every Wednesday at 1:00 pm CST on Facebook, Instagram, LinkedIn, and Twitter.
Want to ask me a tech question? Send it to burton@burtonkelso.com I love technology. I've read all of the manuals, and I'm serious about making technology fun and easy to use for everyone.
Please share this with your friends and family! If you found this post useful, would you mind helping me out by sharing it? Just click one of the handy social media sharing buttons below.
The above content is provided for information purposes only. All information included therein is subject to change without notice. I am not responsible for any direct or indirect damages arising from or related to the use of or reliance on the above content.
Browsing online late at night led me to this article, and it quickly convinced me to read more from the website. The discussion was informative, well structured, and genuinely enjoyable to follow. I appreciated how clearly the author explained the topic throughout the text. The pacing also made the reading experience very comfortable. Articles like this make exploring blogs and websites much more worthwhile. Great post.
I can understand why this trending article is getting attention because the topic was explained in a very engaging and thoughtful way. The author clearly approached the subject from an interesting angle that made the discussion stand out. I especially appreciated how balanced the writing felt throughout the text. The content remained informative without becoming too complicated or overwhelming. It is always refreshing to discover articles that are both popular and genuinely useful. Great work overall.
This article was both informative and comfortable to read from start to finish. The online content explained the topic in a way that felt simple, organized, and engaging at the same time. I appreciated how the author stayed focused on the subject and avoided repeating the same points. The smooth flow of the text made the entire reading experience much more enjoyable. Good online writing should feel useful without becoming difficult to follow, and this article did that perfectly.
I found this article both informative and engaging from beginning to end. The clear organization and thoughtful explanations made it an interesting post that was easy to follow. I especially liked the smooth pacing and reader-friendly style used throughout the text. Every section contributed something useful to the overall topic. Posts written with this level of care are always appreciated by readers. Looking forward to more articles soon.
This was one of the more engaging articles I have read recently. The information was presented clearly and supported with relevant examples throughout the discussion. I especially liked how the author focused on practical insights instead of unnecessary complexity. A useful article like this can help readers better understand important subjects in a simple way. The structure of the content made everything easy to follow and enjoyable to read. The writing style felt professional while still remaining approachable. Looking forward to future publications.