WillItSurvive
Education companies · subsidiary of KKR (co-owned with Dragoneer) · United States

Instructure

Instructure makes Canvas, the learning management system used by most North American colleges.

Protection under test
Assessed 22 July 2026 · Evidence as of 22 July 2026
Something worth protecting exists and is being tested right now.
On the recordSince 22 July 2026 · Checkable from 2026-2027 · Every call on the record Checkpoint: 2026-2027 institutional renewal cycle, the first since the April-May 2026 breach
The call

Canvas still owns the classroom, but a second breach and paid ransom land right as schools decide whether to renew or walk.

Instructure makes Canvas, the software that colleges use to manage grades, assignments, and student records. Canvas is hard to replace because it stores years of student data, connects to over 1,100 other college tools, and meets strict privacy rules that schools legally depend on. However, a massive data breach in April-May 2026 that exposed hundreds of millions of records, combined with seven active lawsuits and ownership by a private equity firm that needs big profits by 2028, has shaken the trust that locked colleges in. The next 18 months will reveal whether colleges stick with Canvas despite the breach (proving it still has real staying power) or switch to competitors like D2L Brightspace (proving the lock-in was weaker than it looked).

Why
01
AI pressure: None apparent. AI tools like OpenAI plug into Canvas through IgniteAI rather than replacing it, since something still has to hold grades and rosters. Could AI do the core job? Unlikely.
02
Bigger players: D2L Brightspace. D2L already pulled SUNY and CUNY off Blackboard in 2024 and could try the same move against a wounded Canvas in renewal season. Could a giant copy it? No, they are blocked.
03
What protects it. Switching an entire university off Canvas means rebuilding grade records, FERPA workflows, and 1,100+ integrated tools, which schools avoid unless forced.
What would change this call
Canvas post-breach 2026-2027 renewal rate falls below 90% at any state system or Big Ten school. Would show the breach and litigation are actually driving institutions away, not just headlines.
D2L or Blackboard announces winning a flagship state system or Big Ten university contract in 2026-2027. Would confirm a rival is converting Canvas's breach crisis into real market share.
A third Instructure data breach or repeat ShinyHunters-style attack is disclosed. Would show the trust and compliance failures are systemic, not a one-off.
Key numbers
  • Canvas holds 41-50% of North American higher-ed LMS market (2024-2026)
  • Second breach in 8 months exposed about 275M records (May 2026)
  • KKR paid $4.8B to take Instructure private (Nov 2024)
Named risks
  • Second ShinyHunters breach in 8 months, ransom paid, ~275M records claimed exposed, April-May 2026. Severity: high
  • Seven federal class-action suits including one naming owner KKR as co-defendant, filed May 2026. Severity: high
  • PE ownership leverage plus $1B-by-2028 revenue target could pressure security investment and margins. Severity: medium
  • D2L actively winning system-level flagship migrations, threatening renewal-cycle share. Severity: medium
  • Unproven AI features (IgniteAI Agent, Project Athena) could disappoint at scale, affecting renewal economics. Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
D2L Brightspacegaining onOvertook Anthology Blackboard in 2024 via full SUNY and CUNY system migrations
Anthology Blackboardlosing toFell behind D2L in share by 2024, retaining roughly 12-16% NA share
MoodlecontestingHolds 9-16% of NA higher-ed LMS share as open-source alternative, 2024-2026 data
Google ClassroomcontestingFree, Workspace-bundled option cited as lower-end alternative in 2024 press coverage
PowerSchool/SchoologycontestingNamed Canvas competitor amid comparable PE-backed edtech consolidation, Bain's $5.6B PowerSchool deal, 2024
Questions people ask
Is Instructure profitable in 2026?
Unknown publicly. Instructure went private under KKR and Dragoneer on November 13, 2024 in a $4.8B deal and has filed no audited financials since. Last public figures were FY2023 revenue of $530.2M and a trailing-twelve-month figure of $634.44M as of Q3 2024. The company has stated a target of $1B revenue by 2028.
Who owns Instructure?
Instructure is owned by investment funds managed by KKR alongside growth investor Dragoneer, who took the company private on November 13, 2024 for approximately $4.8B enterprise value at $23.60 per share, ending its second stint as a public NYSE company (ticker INST).
Was Canvas LMS hacked?
Yes. In April-May 2026, Canvas suffered what is reported as the largest education data breach on record, with attacker group ShinyHunters claiming exfiltration of roughly 275 million records across 8,800-9,000 institutions and demanding ransom by May 12, 2026. This was reportedly the second ShinyHunters breach of Instructure in eight months, the first via Salesforce social engineering in September 2025.
Could AI replace Instructure or Canvas?
Unlikely soon. Instructure has embedded AI as a feature inside Canvas rather than being displaced by it, via a July 2025 OpenAI partnership, IgniteAI on AWS Bedrock, and the July 22, 2026 Project Athena study coach. Raw LLMs cannot own grades, rosters, or FERPA compliance status that Canvas holds as the system of record for roughly 41-50% of North American higher-ed enrollment.
Who is Instructure's biggest competitor?
D2L Brightspace, holding roughly 16-20% of North American higher-ed LMS share versus Canvas's 41-50% as of 2024-2026 data from EdTech analyst Phil Hill. D2L overtook Anthology Blackboard in 2024 largely through full SUNY and CUNY system migrations, making it the most active share-taker against Instructure.
Will Instructure go public again?
No IPO plans have been identified as of July 2026. The company was taken private by KKR and Dragoneer on November 13, 2024 after previously trading on NYSE as INST since 2021, and its stated near-term goal is reaching $1B revenue by 2028 under private ownership, not a public re-listing.
Timeline
  • 2026-07-22Instructure announces Project Athena AI study coach under new Instructure Foundry incubator
  • 2026-05-13Canvas breach confirmed publicly; ShinyHunters claims ~275M records across ~8,800-9,000 institutions
  • 2026-05-11Seven federal class-action suits filed over breach, one naming KKR as co-defendant
  • 2026-04-01Instructure launches Canvas Core, Plus, Next pricing tiers bundling AI features
  • 2025-12-11IgniteAI Agent (Model Context Protocol) and AI Nutrition Facts labels launched
  • 2025-09First ShinyHunters breach of Instructure via Salesforce social engineering, per Bitdefender
  • 2025-07-19Instructure launches IgniteAI on AWS Bedrock and announces OpenAI global partnership
  • 2024-11-13KKR and Dragoneer complete $4.8B acquisition, Instructure delists from NYSE
  • 2021Instructure IPOs on NYSE under ticker INST
  • 2020Thoma Bravo takes Instructure private for approximately $2B
Revision history
22 July 2026
First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources