Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Varonis: ShinyHunters Hack of Canvas: Higher Ed Impact

Varonis
07/17/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


So Canvas is used by about 50% of higher education and a large percentage of K through 12 schooling for taking tests, curriculums, and lesson plans. So the amount of data that they host is quite significant, but the timing of this attack is what is so novel to me. The attackers chose to target a learning management system and exam system during finals. So talk about an incentive to pay. How can you finish the semester or get your final grade from an accredited university if your test got interrupted? I mean, it could set back the higher education system significantly. So it's no wonder that there was a lot of speculation around paying the ransomware threaters. It appears as though Canvas has reached some agreement with Shiny Hunters. At least that's what we've seen so far.

TL;DR

  • ShinyHunters targeted Canvas, a learning management system used by roughly 50% of higher education institutions, in a ransomware attack timed to coincide with finals season.
  • The attack's timing was strategically calculated — disrupting exams and final grades created maximum institutional pressure to pay the ransom demand.
  • Canvas appears to have reached some form of agreement with ShinyHunters, suggesting the coercive timing strategy may have been effective in securing payment.

Summary

This short-form analysis from Varonis examines the ShinyHunters ransomware attack on Canvas, the learning management system used by approximately 50% of higher education institutions and a significant share of K-12 schools. The attack is notable not just for the scale of data Canvas hosts — including tests, curricula, and lesson plans — but for its deliberate timing during finals season. By targeting an exam and learning management platform at the most critical point in the academic calendar, the attackers maximized institutional pressure to pay. The disruption to final grades and semester completion at accredited universities created an unusually strong ransomware incentive. Varonis notes that Canvas appears to have reached some form of agreement with ShinyHunters, suggesting the ransom pressure may have been effective. The incident highlights the growing vulnerability of education sector platforms and the strategic sophistication of modern ransomware groups in selecting both their targets and their attack windows.

Chapters

0:00 - Canvas Attack Overview
0:12 - Strategic Timing During Finals
0:39 - Ransom Speculation & Agreement

Key Quotes

0:15 "The timing of this attack is what is so novel to me."
0:20 "The attackers chose to target a learning management system and exam system during finals."
0:30 "How can you finish the semester or get your final grade from an accredited university if your test got interrupted? ..."
0:45 "It appears as though Canvas has reached some agreement with Shiny Hunters."

FAQ

Why did ShinyHunters choose to attack Canvas during finals season?

The timing was strategic — by targeting an exam and learning management system during finals, the attackers maximized pressure on institutions that could not afford to delay semester completion or withhold final grades from students.

Did Canvas pay the ransom to ShinyHunters?

Based on available information at the time of this video, Canvas appears to have reached some form of agreement with ShinyHunters, though the exact terms were not confirmed.


Categories:
  • » Webinar Library » Varonis
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Threat Intelligence
  • Security Operations
  • Short Form
  • Getting Started
  • Ransomware
  • Education Sector Security
  • ShinyHunters
  • Learning Management Systems
  • Threat Actor Tactics
  • Data Breach
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Varonis: ShinyHunters Hack of Canvas: Higher Ed Impact

              Upcoming 360 View Events

              • Nov
                19

                360View: Govern, Secure & Recover Your Microsoft 365 Environment

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Oct
                  27

                  Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action

                  10/27/202611:00 AM ET
                  • Oct
                    28

                    EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                    10/28/202601:00 PM ET
                    • Nov
                      12

                      Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

                      11/12/202601:00 PM ET
                      More events

                      Industry Events (Sponsor Hosted)

                      • Oct
                        20

                        Master Data Governance for AI with Cyera and Snowflake Insights

                        10/20/202611:00 AM ET
                        • Oct
                          27

                          Maximize Security, Value, and Returns on Your Microsoft Investment

                          10/27/202611:00 AM ET
                          • Oct
                            27

                            The HUMAN Experience: Real-Time Insights into Page Intelligence

                            10/27/202601:00 PM ET
                            • Oct
                              28

                              Ensuring AI Security Across the APAC Region

                              10/28/202601:00 AM ET
                              • Oct
                                28

                                EMEA: Ensuring Comprehensive Security for AI Applications

                                10/28/202606:00 AM ET
                                More events

                                Upcoming Webinar Calendar

                                • 10/20/2026
                                  11:00 AM
                                  10/20/2026
                                  Master Data Governance for AI with Cyera and Snowflake Insights
                                  https://www.truthinit.com/index.php/channel/2137/master-data-governance-for-ai-with-cyera-and-snowflake-insights/
                                • 10/27/2026
                                  11:00 AM
                                  10/27/2026
                                  Maximize Security, Value, and Returns on Your Microsoft Investment
                                  https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
                                • 10/27/2026
                                  11:00 AM
                                  10/27/2026
                                  Illumio: See It. Stop It. Contain It. Lateral Movement Defense in Action
                                  https://www.truthinit.com/index.php/channel/2182/see-it-stop-it-contain-it-lateral-movement-defense-in-action/
                                • 10/27/2026
                                  01:00 PM
                                  10/27/2026
                                  The HUMAN Experience: Real-Time Insights into Page Intelligence
                                  https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                                • 10/28/2026
                                  01:00 AM
                                  10/28/2026
                                  Ensuring AI Security Across the APAC Region
                                  https://www.truthinit.com/index.php/channel/2125/ensuring-ai-security-across-the-apac-region/
                                • 10/28/2026
                                  06:00 AM
                                  10/28/2026
                                  EMEA: Ensuring Comprehensive Security for AI Applications
                                  https://www.truthinit.com/index.php/channel/2127/emea-ensuring-comprehensive-security-for-ai-applications/
                                • 10/28/2026
                                  01:00 PM
                                  10/28/2026
                                  AMERICAS: Safeguarding AI Across All Fronts
                                  https://www.truthinit.com/index.php/channel/2126/americas-safeguarding-ai-across-all-fronts/
                                • 10/28/2026
                                  01:00 PM
                                  10/28/2026
                                  EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                                  https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                                • 11/04/2026
                                  11:00 AM
                                  11/04/2026
                                  Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                                  https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                                • 11/05/2026
                                  02:00 PM
                                  11/05/2026
                                  HUMAN Dialogue: Embracing the Era of AI-Driven Consumers.
                                  https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-era-of-ai-driven-consumers/
                                • 11/05/2026
                                  02:00 PM
                                  11/05/2026
                                  Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                                  https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                                • 11/12/2026
                                  01:00 PM
                                  11/12/2026
                                  Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision
                                  https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
                                • 11/19/2026
                                  01:00 PM
                                  11/19/2026
                                  360View: Govern, Secure & Recover Your Microsoft 365 Environment
                                  https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                                • 11/19/2026
                                  01:00 PM
                                  11/19/2026
                                  Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                                  https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                                Truth in IT
                                • Sponsor
                                • About Us
                                • Terms of Service
                                • Privacy Policy
                                • Contact Us
                                • Preference Management
                                Desktop version
                                Standard version