ShinyHunters breached Instructure and Vimeo, exposing millions of student and user records through direct and supply chain attacks.