An Oklahoma cybersecurity expert spoke to News 9 on Friday about the nationwide breach of Canvas, a popular learning platform used by schools and iniversitys around the country. Canvas is a learning system that allows students to submit assignments, take tests and manage their day-to-day lessons. RELATED: Canvas student portal is down, multiple schools confirm “It’s embedded into like 40% of all education [institutions] in the United States. So, they hit 9,000 educational institutions; got about 275 million personal records,” said Cybersecurity Specialist with EMSCO Solutions Ron Vaughn. The platform is owned by a company called “Instructure.” “They had been breached by a hacking group. That’s actually a hacking supergroup,” Vaughn stated. The supergroup called “ShinyHunters” is “an amalgamation of three different groups that have worked together since, like September, and they’ve been hitting large organizations that have integrations with Salesforce.” RELATED: Who is the group behind the Canvas cyberattack? Vaughn explained that names, email addresses, private messages, government ID’s and login credentials could have been compromised in Thursday’s attack-- which happened during finals week for many college students. “You hit them when they need it the most. It’s the most, like it’s the best leverage to get them to actually pay up. You want someone to pay quickly. You don’t want them to have time to think about it,” he shared. While the public likely won’t hear about how schools resolve their individual breaches, Vaughn said there are things people can do to strengthen their own cybersecurity. “If you’re involved in the breach, obviously, using any passwords you were using in Canvas, you need to stop using them anywhere else. You want to change that password; use multi-factor authentication.” Two-factor authentication is one of the best ways to protect one’s cybersecurity, he added. ShinyHunters gave schools impacted a May