Edtech firm Instructure has revealed a data breach in which hackers compromised sensitive information, including names, email addresses, student ID numbers, and user messages. The breach occurred after hackers disrupted the company's services, posing a significant threat to the security of its users' data. Instructure's disclosure comes amid threats from the hackers to leak the stolen data, highlighting the urgent need for the company to take swift action to mitigate the damage. The breach is a stark reminder of the vulnerabilities that exist in the edtech sector, where sensitive student information is often stored. Technical details of the breach, including the method used by the hackers, have not been disclosed, but the incident is likely to have significant implications for the company and its users1. This breach matters to security practitioners because it underscores the importance of robust security measures in protecting sensitive data, particularly in industries that handle large amounts of personal information.