06/05/2026
π‘π€¬π‘
Tasmanian students, teachers and school staff may have had personal information stolen in a global cyberattack on Canvas, the learning platform used by the Department for Education, Children and Young People and TasTAFE.
Canvas owner Instructure confirmed user data was exposed, including names, email addresses, student ID numbers and user messages, but said it had no evidence passwords, birth dates, government IDs or financial details were taken.
Extortion gang ShinyHunters claimed responsibility and listed Instructure on its dark web leak site with a "pay or leak" ultimatum, while DECYP said it had not been told whether Tasmanian data was obtained.
DECYP said Canvas was running normally, learning had not been disrupted and Tasmanians should stay alert for scams while investigations continue.