1. [News](/news) 2. ShinyHunters claims Liberty University data breach affecting student and staff information # ShinyHunters claims Liberty University data breach affecting student and staff information A data breach involving Liberty University was reported in May 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team May 8, 2026 Table of Contents * [What happened in the Liberty University data breach?](#what-happened-in-the-liberty-university-data-breach) * [Who is behind the incident?](#who-is-behind-the-incident) * [Impact and risks for Liberty University customers](#impact-and-risks-for-liberty-university-customers) * [How to protect against similar security incidents](#how-to-protect-against-similar-security-incidents) ## Key facts: Liberty University data breach * Date occurred April 30, 2026 * Date discovered May 1, 2026 * Date reported May 7, 2026 * Target entity Liberty University * Source of breach Ransomware group ShinyHunters * Data types Student and staff information * Status Ongoing; reported on May 7, 2026. * Severity Medium; unauthorized access to educational records and potential personal identifiers. ## What happened in the Liberty University data breach? Liberty University (liberty.edu) was impacted by a significant cyberattack targeting Canvas, a widely used online learning platform, which was reported on May 7, 2026. The threat actor known as ShinyHunters claimed responsibility for the incident, which reportedly occurred during final exams and disrupted access for students and faculty. The breach originated from an attack on Instructure, the parent company of Canvas, affecting multiple educational institutions across Virginia. The incident is classified as medium severity because it involves unauthorized access to student and staff information. ShinyHunters has demanded a ransom to prevent the leaking of exfiltrated data, setting a deadline for negotiations. While the full extent of the compromised data is still being verified, such breaches typically lead to heightened risks of targeted phishing and identity theft for the affected academic community. ## Who is behind the incident? ShinyHunters is a prominent cybercriminal group that emerged around 2020, known for high-profile data extortion campaigns. Rather than relying solely on file encryption, the group focuses on stealing large databases and threatening to leak or sell them on underground forums. They have previously targeted major corporations across various sectors, often exploiting misconfigured cloud environments or compromised credentials. ShinyHunters is recognized for its aggressive ransom demands and has a history of successfully exfiltrating sensitive information from tech-heavy organizations and service providers. ## Impact and risks for Liberty University customers Students and staff at Liberty University face several potential risks following the exposure of their information. Compromised data could be used to facilitate targeted phishing attacks, where criminals pose as university officials to steal login credentials or financial details. There is also a risk of identity theft if personal identifiers were included in the accessed files. Furthermore, the timing of the attack during final exams caused significant operational disruption, potentially affecting academic performance and administrative workflows. Typical outcomes of such breaches include an increase in fraudulent communications and unauthorized account access attempts. Affected individuals should immediately update their account passwords and monitor their financial statements for any suspicious activity. The university’s transparency in reporting the incident is a critical step in helping the community implement necessary protective measures and reduce the long-term impact of the breach. ## How to protect against similar security incidents In response to the data breach involving Liberty University and the Canvas platform, affected students and staff should take immediate action to secure their accounts. * **Update credentials and enable MFA.** Change your Liberty University account password to a strong, unique passphrase immediately. Enable multi-factor authentication (MFA), preferably using phishing-resistant methods like hardware keys or authenticator apps, on all school-related and personal accounts. * **Monitor for phishing and social engineering.** Be highly suspicious of any emails, texts, or calls requesting sensitive information or directing you to login pages. Always verify the sender’s identity through official university channels before clicking on links or downloading attachments. * **Implement attack surface management.** For educational institutions, it is vital to maintain continuous visibility over third-party software vendors to identify potential vulnerabilities. Deploy attack surface management tools to monitor the security posture of the entire digital supply chain and ensure rapid response to vendor-related incidents. > Taking these proactive steps can significantly reduce the risk of secondary attacks following a data breach. ## Frequently asked questions ### What happened in the Liberty University security breach? ShinyHunters claimed responsibility for a security attack on Liberty University (liberty.edu) in May 2026. The incident was first reported on May 7, 2026, and involved unauthorized access to the Canvas online learning platform used by the university. ### When did the Liberty University breach occur? The Liberty University breach was publicly reported on May 7, 2026. ShinyHunters referenced the incident around that time, but reports suggest the unauthorized access may have occurred in late April 2026. ### What data was exposed? The types of data involved in the Liberty University incident reportedly include student and staff information. ShinyHunters has claimed to possess this data and has threatened to leak it unless their ransom demands are met. ### Is my personal information at risk? If you interacted with Liberty University, there’s a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, and educational records. Stay alert for updates and take precautionary measures to secure your accounts. ### What steps should companies take after being breached? Liberty University is likely working with authorities and the platform provider to secure their systems and investigate the extent of the breach. They are expected to notify affected parties, provide guidance on protective actions, and review their third-party security protocols to prevent future occurrences. ## Is your organization exposed to a similar risk? UpGuard continuously monitors vendors for exposed credentials and infrastructure risk, so you can catch the next breach before it becomes a headline. [Start your free trial](https://cyber-risk.upguard.com/register/trial) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?) ## Latest news Stay up-to-date with the latest news in cybersecurity. * ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 20, 2026 * ### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 17, 2026 * ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. UpGuard Team July 16, 2026 * ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 [View all news](/news) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.