ShinyHunters. 275 Million Records. The Same Group Hit Two Sectors This Week.
ShinyHunters compromised Instructure's Canvas platform used by 8,800 schools and universities, claiming 275 million records across students, teachers, and staff. The same threat actor group — linked to Coinbase Cartel, Scattered Spider, and Lapsus$ — hit Grafana today, targeting enterprise infrastructure monitoring. Two sectors. One week. One group.
The pattern is not opportunistic. It is systematic targeting of organizations where data density is high and response infrastructure is historically weak. The average organization takes 181 days to detect a breach. Does your IR plan account for a group that moves this fast?
Read Full Report →The Breach Report is published by Dianne Powers, Fractional CISO and founder of First 48 CISO. Every issue is written from 15 years of enterprise cybersecurity experience across financial services, critical infrastructure, and government sectors. The analysis is practitioner-level, not press release summaries.