The breach was claimed by a hacking group called “ShinyHunters,” which posted a message online warning schools they had until Tuesday, May 12, to contact the group before data was leaked.
The message, posted alongside what appeared to be download links and references to “pay_or_leak,” claimed the group had “breached Instructure,” the company that operates Canvas.
Rutgers was among thousands of institutions impacted by the incident.
Rutgers’ Office of Information Technology said it became aware of “an unauthorized message posted to Canvas related to the nationwide data breach at Instructure.”
The university first acknowledged the nationwide incident Monday, May 4, saying Canvas remained operational at the time while officials monitored updates from Instructure. By Wednesday, May 6, Rutgers said Instructure had confirmed the university was impacted by the widespread breach.
“Instructure informed the Office of Information Technology that there is no indication that passwords, dates of birth, government identifiers, or financial information were involved in this incident,” Rutgers said. “It is unclear what Rutgers data was involved, and Instructure’s investigation is ongoing.”
Rutgers said Instructure has since secured the platform, hired a third-party forensic firm, and notified law enforcement authorities.
The university said additional updates would be provided to students, faculty, and staff as more information becomes available.
Click here to follow Daily Voice and receive free news updates.
