US Congress Demands Instructure Testimony on Cyber Attacks

The US Congress has called on Instructure to testify before the House Committee on Homeland Security. This request follows two cyber attacks carried out by the ransomware group ShinyHunters on the company's Canvas platform. These attacks resulted in the theft of student data and disrupted school operations during final exams. The attacks occurred during a critical period when many schools in the US were conducting their final assessments. The ShinyHunters group is known for its aggressive tactics aimed at stealing sensitive data for extortion purposes.

Instructure, which operates the Canvas platform, has not yet released detailed information regarding the incidents. Initial reports of the attacks surfaced just before the exams, causing significant stress for students and teachers. Schools had to activate emergency plans to maintain classes and conduct the exams. The full impact on the affected schools has not yet been fully assessed, but reports indicate a significant disruption to school operations. Instructure has previously emphasized that the security of user data is of utmost priority.

However, the incidents raise questions about the effectiveness of the company's security measures. Experts warn that such attacks not only jeopardize data integrity but can also undermine user trust in the platform. The House Committee on Homeland Security plans to hold the hearing in the coming weeks. Committee members have already announced that they will demand comprehensive information regarding Instructure's security protocols and measures to prevent future attacks. The hearing may also serve to formulate recommendations for improving cybersecurity in the education sector.

The ShinyHunters group has previously conducted several high-profile cyber attacks, targeting companies across various industries. The group is known for compromising databases and selling the stolen data on the dark web. The attacks on Instructure could be part of a larger strategy to target schools and educational institutions. Instructure's response to the attacks is being closely monitored. Analysts expect that the company may need to rethink and strengthen its security strategies to prevent future incidents.

The incidents could also have legal consequences, especially if it is determined that Instructure did not adequately respond to the threats. The congressional hearing is expected to spark discussions about the responsibility of technology companies in the education sector. Legislators may take action to ensure that companies like Instructure implement appropriate security measures to protect the data of students and teachers. The debate over cybersecurity in the education sector has gained importance in recent years. The exact details regarding the stolen information and the number of affected students are currently unclear.

Instructure has announced that it is working with authorities to investigate the incidents and inform affected users. The security vulnerability that led to the attacks could also impact other platforms in the education sector. The incidents have already led to an increase in discussions about the need for better security standards in schools. Educational institutions are increasingly becoming targets of cyber attacks, highlighting the urgency of implementing effective protective measures.

According to a study by the Cybersecurity & Infrastructure Security Agency (CISA), educational institutions have become 30% more frequently targeted by cyber attacks in recent years. The hearing of the House Committee on Homeland Security is scheduled for June 15, 2026. Instructure is being asked to provide comprehensive information regarding the incidents and the measures taken to improve cybersecurity.