A major disruption has occurred in the education sector as Canvas, a widely used learning management system, has gone offline due to a potential data breach. The threat actor group ShinyHunters is claimed to be responsible for the breach, and has threatened to leak sensitive data from affected schools1. The breach has significant implications for the security of student and faculty data, and may have far-reaching consequences for educational institutions that rely on Canvas. Technical details of the breach are still emerging, but it is clear that the incident has caused widespread disruption to online learning activities. The vulnerability exploited by ShinyHunters has not been disclosed, but it is likely that the breach will prompt a thorough review of Canvas's security protocols. This incident matters to cybersecurity practitioners because it highlights the growing threat of data breaches in the education sector, and the need for robust security measures to protect sensitive information.