Breaking News
Source
ShinyHunters Hits Canvas Again: 275M Records at Risk Across 9K Schools
The criminal extortion group ShinyHunters has struck Instructure a second time in less than a year, claiming to have stolen records tied to 275 million users across nearly 9,000 schools worldwide. The targeted platform—Canvas, which supports course delivery, assignments, grades, and messaging for more than 30 million active users—went offline for stretches this week as the company scrambled to respond. The timing is particularly damaging: finals season is underway at institutions across the country.
Instructure first disclosed a cybersecurity incident on May 1, initially describing it as contained. The company confirmed that names, email addresses, student ID numbers, and messages among users were likely accessed. In a statement, Instructure said it found no evidence that passwords, dates of birth, government identifiers, or financial data were compromised. But the exposure of private messages—which on Canvas platforms frequently include disclosures of medical conditions, accommodation requests, and Title IX communications—raises the stakes considerably.
On May 7, ShinyHunters re-emerged, defacing login pages at multiple universities with an extortion message claiming Instructure had “done some security patches” rather than negotiate. The group set a new deadline of May 12 to leak data unless contacted. Among the institutions where the ransom message appeared were Harvard, Princeton, Columbia, and Georgetown universities.
Read the full article
Key Points that Matter
- Educational institutions remain prime cyber targets, where voice attacks can accelerate credential theft and account compromise.
- Stolen identities increase the effectiveness of vishing, enabling attackers to impersonate trusted staff, students, and service providers.
- Protecting voice communications helps reduce initial access opportunities, limiting attackers before they can exploit human trust.
You Can Stop Voice-Based Threats
The Voice Channel has become the most exploited pathway for threat actors. Voice Security is no longer a nice to have, but a critical mandate.
Mutare’s Voice Security Platform defends the voice channel as critical infrastructure. Operating as a technical control at the network edge, it stops vishing, social engineering, spoofed calls, spam storms, and GenAI-powered attacks.
We understand that every organization is at a different stage of its Voice Security journey.
Some are just beginning to understand the risks. Others are evaluating solutions or validating technologies. Take a moment to check out Test Drive to choose your path towards understanding the voice security landscape and learning about a comprehensive defense solution.
Learn More About Voice Security
We’ve curated the latest information and events about Voice Security:
Articles
What the 2026 Voice Threat Survey Reveals About the Future of Cybersecurity
Five emerging trends are reshaping enterprise cybersecurity, and they all point to one conclusion: Voice Security is becoming an essential component of a modern cyber defense strategy.
The Biggest Voice Security Risk Isn’t AI. It’s the Awareness Gap.
The 2026 Voice Threat Survey reveals a troubling reality: while voice-based attacks are accelerating, many organizations still underestimate the threat, leaving one of the enterprise’s most accessible attack surfaces dangerously exposed.
Voice Security Has Reached a Tipping Point
The 2026 Voice Threat Survey reveals why voice can no longer be treated as an overlooked communications channel. It has become one of the fastest-growing cyber threat vectors in the enterprise.
Events
Webinar: Enterprise Voice Security for Cisco
In this live session, attendees will explore how escalating voice threats are targeting Cisco UC, Webex Calling, and Webex Contact Center infrastructures.
WEBINAR: AI-Ready Voice Security
What was once limited to nuisance robocalls has evolved into a continuous stream of unwanted voice traffic, now amplified by automation, spoofing, and AI-driven attack campaigns.
ViVE, Feb 2026, Los Angeles, CA
Please join us in Los Angeles February 22-25 and connect with a member of the Mutare Team to discuss patient experience, patient care, and risk management.
Case Studies
Real Use Case Voice Traffic Filter Energy – 140
This customer was experiencing a significant increase in disruptions and potential threats resulting from spam calls with spoofed numbers.
Real Use Case Voice Traffic Filter Finance – 139
This organization was experiencing an unacceptably large amount of spam phone calls, including robocalls, dead air calls, and detected nefarious scam callers.
Real Use Case Voice Traffic Filter Finance – 138
Disruptive robocalls, spoofed calls and scam calls were ringing into employee lines, undermining service delivery for legitimate clients and exposing employees to potential threats.