Live disclosure tracker · updated continuously

Education Sector Data Breaches

Universities, K-12 districts, and ed-tech vendors hold massive student-record databases that attract identity-theft operations and ransomware groups. Below is every education-sector breach LeakTrace has indexed.

98B+

Records Exposed

860

Incidents

94+

Countries

+104%

Breach Velocity YoY

View Live Map → Run Free Exposure Scan RSS

Browse by sector

All breaches Healthcare Finance Government Technology Retail Education Legal

Browse by year

2024 2025 2026 2026 Index

Education Sector Data Breaches (860 indexed)

high · education · Jul 11, 2026

Glendale Community College

793,925 records exposed — Academic records, Dates of birth, Email addresses, Genders and 4 more

View incident → Original disclosure Indexed 7 hours, 45 minutes ago

critical · education · Jul 9, 2026

Instructure Canvas

280M student and staff records stolen

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas

Largest education breach on record via ShinyHunters

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas LMS

275M student records stolen by ShinyHunters

View incident → Indexed 2 days, 7 hours ago

medium · education · Jul 9, 2026

Oxford University CareerConnect

Student PII exposed via career platform breach

View incident → Indexed 2 days, 7 hours ago

high · education · Jul 9, 2026

University of Nottingham

455K accounts exposed including passports and grades

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas LMS

275M users exposed in ransomware extortion

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas

275M records across 9K institutions stolen

View incident → Indexed 2 days, 7 hours ago

high · education · Jul 9, 2026

University of Nottingham

455K records with passport and disability data

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas LMS

275M student and staff records stolen in ransomware attack

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas

280M student and staff records stolen by ShinyHunters

View incident → Indexed 2 days, 7 hours ago

high · education · Jul 9, 2026

University of Nottingham

455K accounts exposed including passports and disability records

View incident → Indexed 2 days, 7 hours ago

high · education · Jul 9, 2026

University of Nottingham

455K records with passports and financials leaked

View incident → Indexed 2 days, 7 hours ago

high · education · Jul 9, 2026

University of Nottingham

455K records leaked including passports and disability data

View incident → Indexed 2 days, 7 hours ago

medium · education · Jul 9, 2026

Oxford CareerConnect

Student PII exposed via career platform breach

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas

280M student and staff records stolen via ShinyHunters

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas

275M student and staff records stolen

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Hackers accessed the institution’s internal network and deleted two drives containing

Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data. The post Mount Royal University Confirms Data Stolen in Ransomware Attack appeared first on Se

View incident → Original disclosure Indexed 2 days, 7 hours ago

high · education · Jul 9, 2026

University of Nottingham

455K records with passports and financial data leaked

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Canvas LMS Instructure

275M user records stolen across 8000 institutions

View incident → Indexed 2 days, 7 hours ago

critical · education · Jul 9, 2026

Instructure Canvas

30M student and staff records stolen

View incident → Indexed 2 days, 7 hours ago

medium · education · Jun 20, 2026

JCPenney

368,418 records exposed — Dates of birth, Email addresses, Government issued IDs, Job titles and 4 more

View incident → Indexed 3 weeks ago

medium · education · Jun 15, 2026

Infinite Campus

137,123 records exposed — Email addresses, Employers, Job titles, Names and 4 more

View incident → Indexed 3 weeks, 5 days ago

medium · education · May 11, 2026

ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school

ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen data unless institutions negotiate

View incident → Original disclosure Indexed 2 months ago