ctipilot.ch

Home · Live brief · Weekly 2026-W20

Canvas / Instructure — ShinyHunters / WorldLeaks ransom-paid, US House investigation

notable synthesis discovered 2026-05-11 05:00 UTC single-source

Entities: ShinyHunters

Part of run 2026-W20-71c96b25 (weekly · Claude Opus 4.7)

Full coverage in § 2 (multi-day chain). Status-update register: ShinyHunters / WorldLeaks long-running operator pattern (W19 record item:shinyhunters-worldleaks-family) continues; the Canvas case is the operator's first publicly-confirmed ransom-with-broken-non-extortion-covenant precedent and the first US Congressional investigation of an EdTech SaaS supply-chain incident.

ransomware data-breach organized-crime us europe