Canvas software owner says hackers returned stolen data after cyberattack |
Instructure, the company behind the Canvas learning platform used by thousands of schools and universities worldwide, said it has reached an agreement with hackers to recover stolen data and secure the destruction of any copied information following a major cyberattack. The hacking group ShinyHunters claimed responsibility for the breach, which allegedly exposed data tied to more than 275m users across nearly 9,000 schools, including personal information, enrollment records, and private messages between students and teachers. The attack forced Canvas offline for several hours last week. Instructure said the agreement included the return and deletion of the stolen data, and that it had been told customers would not face extortion attempts. The company did not disclose what, if anything, it provided to the hackers in exchange. Canvas, which has more than 30 million active users globally, is widely used for coursework management and communication. Instructure said compromised information included usernames, email addresses, course details, and messages. The company said it detected unauthorized activity on April 29 and again on May 7, prompting an investigation and notifications to the FBI, the U.S. Cybersecurity and Infrastructure Security Agency, and international law enforcement partners. ShinyHunters, a cybercriminal group linked to several high-profile data breaches, had threatened to release the data publicly if Instructure failed to respond to its demands.