Deal reached with hackers to delete data stolen from the Canvas educational platform
Summary
Canvas' parent company Instructure announced it reached an agreement with the unauthorized actor to delete the stolen data. The incident involved the ShinyHunters group, ransom negotiations, and a claim that data was returned with evidence of destruction, though complete erasure cannot be guaranteed. Forensic analysis and system hardening are ongoing, and the breach exposed student IDs, emails, names, and messages.