
ShinyHunters Steals Student Data From 275 Million Canvas Users
Instructure confirmed that cybercriminals have stolen personal data belonging to 275 million users of its Canvas learning platform. The ShinyHunters extortion group
The latest Data Breaches coverage, tracked and summarised by the analysts who run our SOC.
Updated daily · last update May 6, 2026

Instructure confirmed that cybercriminals have stolen personal data belonging to 275 million users of its Canvas learning platform. The ShinyHunters extortion group
CISA added CVE-2026-31431 to its Known Exploited Vulnerabilities catalogue on Friday, confirming that a nine-year-old Linux kernel flaw is being exploited in live attacks. The…
ShinyHunters claimed to have stolen 1.4 million records from online learning platform Udemy and has threatened to release the data alongside stolen information from Zara…

France's National Agency for Secure Documents was breached on April 15, potentially exposing personal data belonging to millions of citizens who applied
Booking.com confirmed Monday that hackers accessed customer reservation data in a breach that appears to have been running undetected since early April. The travel platform…

Vilhelmina and Dorotea municipalities in Västerbotten were hit by ransomware attacks on April 9, 2026, forcing both councils to activate crisis protocols
Eurail B.V. confirmed that attackers breached its network on 26 December 2025 and stole passport numbers and personal data belonging to 308,777 travellers. The Dutch…

The Dutch Ministry of Finance has shut down its treasury banking portal after discovering unauthorized access to internal systems following a third-party

Italy's data protection authority fined Intesa Sanpaolo €31.8 million ($36 million) on Monday after an employee accessed banking data belonging to 3,573

The Gentlemen ransomware group claimed responsibility for attacking SATS Sports Club Sweden on 22 March 2026, but multiple security researchers are warning

The hacking group LAPSUS$ claims to have stolen 3GB of internal data from pharmaceutical giant AstraZeneca, including source code, employee records, and
A hacker breached France's national bank account registry in January, accessing personal data from 1.2 million accounts using stolen government credentials. French authorities confirmed that…

Adidas is investigating claims by the Lapsus$ hacker collective that it has stolen 815,000 records from the company's extranet through a compromised
This isn't a content mill. The threats we summarise here are the ones our Sweden-based analysts watch for across client environments, around the clock.
See how MDR worksArticles
Longer-form briefings and explainers, from incident breakdowns to practical NIS2 and Zero-Trust guidance.
Cybersecurity 101
Plain-language explainers on the core concepts, threats and frameworks behind modern security, for specialists and decision-makers alike.