Instructure Reaches Agreement with Hackers to Secure Stolen Canvas Data
Instructure, the company behind the online learning platform Canvas, has reached an agreement with the hacker group ShinyHunters to secure the personal data stolen during a recent cyberattack. The hackers had accessed information such as usernames, email addresses, and course details from Canvas users, affecting potentially over 9,000 educational institutions. The agreement reportedly includes the destruction of illicit copies of the data, although it is unclear if a ransom was paid. The breach initially occurred on April 29, exploiting a vulnerability in Free-For-Teacher accounts, and was followed by a second security breach on May 7. In response, Instructure placed Canvas in maintenance mode, temporarily disrupting access for students.