Instructure pays the Canvas hackers, Australian unis still digging out

The Canvas breach has its ending and it is the one nobody wanted: Instructure paid.

Instructure pays the Canvas hackers, Australian unis still digging out

On 11 May, Instructure quietly announced it has "reached an agreement" with ShinyHunters and that the compromised data has been "destroyed." The undisclosed payment ends the public ransom-note phase of the largest education-sector breach on record (about 8,800 institutions, 275 million records, identifying information on students and staff). The Australian institutions running Canvas as their primary LMS are still in incident-response mode. The University of Melbourne, UTS, RMIT, Adelaide, the University of Canberra, Griffith and QUT are all extending assignment deadlines. UTS, RMIT, Adelaide and the Queensland Department of Education have kept Canvas locked down as a precaution. The National Office of Cyber Security is coordinating the response.

Why this matters: every Australian secondary school running Canvas, Schoology or any other Instructure product is now in the same conversation. Three questions worth answering before the next leadership meeting. What student information sits inside the LMS that would not survive a Canvas-style breach. What is the incident-response plan if your LMS vendor announces a ransom-payment "agreement" the same way. And what is the school's position on ransom payments by suppliers. The third one is the awkward one. Paying the hackers ends one crisis and bankrolls the next. School councils that have never had to think about supplier ransomware response now need to. OAIC statement on the incident. Information Age on the 11 May agreement.

WA puts $4.6 million more behind ClassmAIte, an Australian-built AI lesson tool

The WA Department of Education extended its WA ClassmAIte pilot through to the end of 2027 with a $4.6 million top-up announced 7 May as part of the WA state budget. The pilot is currently in 60 schools across the public, Catholic and independent sectors and is targeted to hit more than 100 schools by the end of 2026. ClassmAIte is an AI-assisted lesson-planning interface tied to the Australian Curriculum, built by WA's Department of Education in partnership with Catholic Education WA, AISWA and the School Curriculum and Standards Authority. Teachers ask for a lesson sequence, get one drafted, then edit it. The pitch is workload reduction for the prep hours that happen outside teaching time.

Why this matters: this is the most concrete state-government bet on Australian-built classroom AI right now. Compared with the Microsoft Elevate offer (free for 1,000 schools, US tech giant, data-handling questions implicit), ClassmAIte sits at the other end: state-procured, curriculum-tied, three peak bodies on the table. Independent and Catholic principals in WA can register interest now via the AISWA information sessions. For school leaders outside WA, the watch is whether NSW, Victoria or Queensland fund their own equivalent, or whether the path becomes a national licence of ClassmAIte. The cost is roughly $46,000 per school across the contract term, which is the order-of-magnitude figure other states will use to model their business cases. Mirage News on the budget release. AISWA information webinar.

What to watch in tonight's federal budget for ed-tech

Treasurer Jim Chalmers delivers the 2026-27 federal budget at 7.30pm AEST tonight. Items already on the public record and worth flagging in your pre-reading: the next tranche of demand-driven Needs-based Funding for low-SES and First Nations students at universities (already running since 1 January, the budget confirms whether it is ongoing), the Structural Adjustment Fund opening 1 July, ATEC's first year operating with statutory powers, and the post-Better and Fairer Schools Agreement funding profile through 2034. The watch for ed-tech specifically is whether the budget names a national AI-in-schools envelope, the post-Canvas-breach response (a likely Cyber Security for Schools allocation), or any expansion of the AERO assessment-tools program.

Why this matters: budget night is the lone moment per year where ICT spending in education gets a real public number. Three signals worth tracking for next-day leadership conversations: any line item naming AI in schools (national, not state-level), any cyber-security allocation schools can actually access (federal grants for K-12 cyber capability are rare), and the wording around assessment-tools procurement (which decides whether NAPLAN-adjacent AI marking gets a formal go-ahead). The full budget portal goes live tonight at budget.gov.au.

For the AI in Education Conference at Swissôtel Sydney on 19 May, the post-Canvas conversation has just become the dominant one. We will be reading the budget tonight; tomorrow's brief pulls the operational takeaways for school leaders.