Overview
- The hacker group posted a fresh message inside Canvas on Thursday night that claimed renewed access and set a May 12 deadline for schools to make contact or face data publication.
- Vrije Universiteit Amsterdam cut off all systems tied to Canvas after the message and warned the move could disrupt classes on Friday.
- Universities of the Netherlands listed seven affected universities, while separate reports cite dozens of Dutch institutions on the hackers’ list.
- Stolen data includes names, student numbers, email addresses, and messages, which schools say heightens phishing risk, and Hogeschool Utrecht notified students, police, and the Dutch data authority.
- Hackers claim a global haul affecting roughly 275 million users and about 9,000 institutions, a figure Canvas disputes as it reports more than 30 million users and notes ShinyHunters’ track record from the Odido breach.