Canvas' Parent Company Reaches Agreement with Hacking Group to Secure Stolen Data
The parent company of the Canvas educational tool, Instructure, has reached an agreement with the hacking group ShinyHunters, which was responsible for a data breach involving student and school data. The agreement ensures that all stolen data has been returned and digitally confirmed as destroyed. Instructure has stated that no customers will be extorted as a result of this incident. The breach had affected nearly 9,000 schools, with data including student names, email addresses, and messages. The hacking group has confirmed that the data is deleted and that they will not contact the company or its customers for payment. The decision to pay or not in such situations is complex, as noted by ransomware negotiator Kurtis Minder, who suggested that some payment might have been involved.