Instructure Incident Driving 58 Percent of Breach Notices in 2026
A single data breach involving Instructure, the company behind the Canvas learning management platform, accounts for 58 percent of all breach notices issued in the first half of 2026, according to the Identity Theft Resource Center. Across that period, roughly 1,029 data compromises triggered 471 million total notices.
Why this matters: One company's breach generating more than half of all breach notices in six months tells you something important: concentration risk is real. Instructure runs Canvas, which sits inside schools and universities across the country. That means students, parents, and educators are likely in this. People who never chose to hand their data to a tech vendor had it collected anyway, through their school. When a single platform failure can dwarf every other breach combined, the question is not just what went wrong — it is why so much sensitive data was sitting in one place with apparently little to stop this from happening.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.