Instructure

Major Cybersecurity Breaches Hit Multiple Sectors in 2026

TechCrunch (June 7, 2026) summarizes a series of major cybersecurity incidents through mid‑2026 affecting government, critical infrastructure, enterprise, education and open‑source supply chains. Reported incidents include an alleged Department of Government Efficiency (DOGE) upload of a live Social Security database to an unsecured server, destructive device/wiper attacks tied to Iranian actors that wiped Stryker employee devices, a large credential‑theft and extortion campaign by the ShinyHunters group (including Instructure/Canvas), repeated supply‑chain compromises of open‑source tools (Trivy, Bitwarden, Checkmarx) that exposed downstream customers such as OpenAI and Vercel, an FBI surveillance system breach declared a “major cyber incident,” prolonged downtime at Hasbro after a late‑March compromise, and multiple public exposures of passports and driver licenses. The article frames these as a widening trend of more destructive, cross‑sector attacks.

Worst Hacks and Breaches of 2026 So Far

TechCrunch (published 2026-06-03) reviews a series of major cyber incidents in 2026, spanning government, critical infrastructure, enterprises and open-source supply chains. Key incidents include allegations that operatives linked to the Department of Government Efficiency (DOGE) uploaded a live copy of the U.S. Social Security database to an unsecured server; destructive device-style attacks (wiper malware) and a mass device wipe at medical-tech firm Stryker attributed to Iranian-linked actors; repeated disruptive extortion campaigns by the ShinyHunters gang (including a Canvas breach at Instructure affecting ~30M users); widespread supply-chain compromises of open-source tools (Trivy, Bitwarden, Checkmarx) that led to downstream breaches at companies such as OpenAI and Vercel; an FBI disclosure of a breached surveillance system potentially exposing target phone numbers; prolonged downtime at Hasbro after a cyber incident; and millions of passport/driver’s-license scans exposed by multiple services.

Grafana Labs: Hackers Stole Code, Company Refuses Ransom

Grafana Labs confirmed a security incident in which attackers used a stolen token credential to access the company’s GitLab environment and obtain its source code repositories. The company said the token did not grant access to customer records or financial data; it has since invalidated the token and implemented additional security measures. Attackers attempted to extort Grafana by threatening to publish the codebase, but Grafana refused to pay, citing law‑enforcement guidance. It remains unclear whether any proprietary or non-public code was taken. Grafana’s investigation is ongoing and the company said it will publish findings when the probe concludes. The report contrasts Grafana’s refusal to pay with a separate recent incident in which education‑tech firm Instructure reached an agreement to pay attackers.