Where Sources Agree

• arrows_inputShinyHunters Ransom Deadline: Most accounts emphasize ShinyHunters claimed responsibility for the Canvas cyberattack and issued a ransom demand, setting a May 12, 2026, deadline for schools to negotiate a settlement and prevent a data leak, according to their claims and multiple reports.
• arrows_inputAcademic Deadlines Extended: Outlets generally confirm universities postponed final exams and extended academic deadlines, with students losing access to Canvas during the cyberattack, according to student newspapers across the country and university statements.

Where Sources Disagree

• arrows_outputBreach Containment Disputed: Instructure claimed the cybersecurity incident was contained by May 2 and Canvas was fully operational by May 6. However, ShinyHunters and security analysts asserted a re-compromise on May 7, citing defaced login pages and subsequent changes to Canvas pages on May 8.
• arrows_outputRansom Negotiation Status: Instructure has not confirmed any ransom negotiations or payments to the ShinyHunters hacking group; however, some reports indicate that schools directly contacted the hackers, and the removal of Instructure from leak sites suggests negotiations or payment may have occurred.
• arrows_outputData Compromise Scope: Instructure stated only names, emails, student IDs, and messages were compromised, with no passwords or financial info, while ShinyHunters claimed billions of private messages and phone numbers were stolen.