Instructure
Data Breach on October 06, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | instructure.com | ||
| Threat Actor | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 06, 2025 | ||
| Description | Instructure is an education technology company based in USA, known for its Canvas LMS and other learning & assessment platforms used in K-12, higher ed, and corporate training. | ||
| Leak Size | 35GB |
Credential Exposure for instructure.com
We've indexed 603 @instructure.com accounts from external breaches, plus 225,601 credentials for instructure.com itself.
Last checked Aug 16, 2026
| @instructure.com addresses from external breaches | |
|---|---|
| Third-party breaches | 382 accounts · across 70 breaches · 354 with a plaintext password · most recent Jan 25, 2026 |
| Combo lists | 212 accounts · most recent Aug 15, 2026 |
| Phishing pages | 23 accounts · most recent Aug 12, 2026 |
| Passwords for instructure.com accounts | |
|---|---|
| Combo lists | 171,641 logins · most recent Aug 15, 2026 |
| Infostealer logs | 87,396 logins · 62,175 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Instructure was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.