Canvas owner reaches ‘agreement’ with hackers to secure stolen data

Instructure said it reached an agreement with ShinyHunters after the Canvas breach, leading to the return of stolen data and its reported destruction.

The hackers had claimed they stole 3.5 terabytes of student data and threatened to leak it.

Most Canvas systems have been restored, while Instructure continues forensic review and remediation.

The case raises concerns about student data exposure, ransom-style payments, and trust in education software.