Instructure Settles Canvas Cyberattack

Instructure, the parent company of the online learning system Canvas, reached an agreement with the hacking group ShinyHunters to delete data stolen in a recent cyberattack. The breach caused significant disruption for students and faculty, particularly during finals, as the Canvas platform was temporarily taken offline. While Instructure received 'digital confirmation' of data destruction, cybersecurity experts like Cynthia Kaiser remain skeptical about the long-term effectiveness of such deals, especially if a ransom was paid. The stolen data included student ID numbers, email addresses, names, and messages, affecting nearly 9,000 schools and 275 million individuals worldwide. Instructure is now working with expert vendors to enhance its systems and conduct a comprehensive review of the incident.