Peninsula College students trying to access their virtual classrooms this afternoon first encountered what appeared to be routine news: a cheerful graphic of a rocket and robotic figures, with the announcement that “Canvas is currently undergoing scheduled maintenance.”
That initial impression has since evolved. A more pressing alert now dominates the college’s homepage, declaring, “Canvas is currently unavailable globally. There is no estimated time for restoration at this time. We’ll share updates as soon as we receive them.”
The root of this disruption traces back to a major breach affecting Instructure, the organization behind Canvas, one of the most widely adopted learning platforms in U.S. higher education.
Cybercriminals from the ShinyHunters group claimed responsibility for the intrusion, stating they exfiltrated 275 million records and more than 3.65 terabytes of information. Their operations have touched approximately 8,809 educational entities—including K–12 districts, colleges, and online learning providers—across the globe.
Locally, this means sensitive academic and personal details belonging to Peninsula College’s student population and workforce may now circulate among underground markets or dark web forums. With the college’s login portal still restricted, the implications extend beyond a temporary tech hiccup.
ShinyHunters uploaded a public ransom note to a dark web data dump, noting their return to Instructure’s systems and poking fun at what they described as the company’s delayed attention to security upgrades. The hackers have set May 12, 2026, as the final date for negotiations. If no agreement is reached, they warned, “several billions of private messages among students and teachers” could be made public.
The vulnerability of the Canvas ecosystem is underscored by its deep integration into academic workflows. Instructure’s official notification to impacted institutions noted that core identifiers such as passwords, Social Security numbers, driver’s license details, and billing information do not appear to have been compromised—at least not at this stage.
Nonetheless, the company confirmed exposure of full names, institutional email addresses, student identification codes, and archived conversation threads. These correspondences often include candid exchanges with academic mentors, requests for classroom accommodations, and reports filed under Title IX, making them especially valuable or delicate in the wrong hands.
Canvas serves roughly 41% of North American colleges and universities, lending scale and significance to this incident. It marks the second major breach Instructure has endured in under a year, following a separate intrusion into its Salesforce infrastructure in September 2025, also attributed to ShinyHunters.
In response to the latest development, Instructure has brought in external cybersecurity specialists and coordinated with federal and state law enforcement agencies. Investigations continue into the full breadth of data accessed and systems involved.
Clallam County residents are urged to stay alert. Experts recommend watching for unexpected transactions, login attempts from unfamiliar locations, and verifying the authenticity of any official-looking communications—especially those prompting password changes or redirecting to Canvas-related portals.