• Instructure, the US parent company of online learning system Canvas, announced it reached an agreement with hacking group ShinyHunters that stole student and school data.
  • The hackers returned the data, and Instructure received digital confirmation of data destruction; no customers will be extorted.
  • ShinyHunters claimed responsibility on May 3, stating they seized approximately 6.65 terabytes of Canvas data.
  • The group threatened to release data from nearly 9,000 schools unless a ransom was paid, but extended the deadline amid negotiations.
  • The breach impacted universities during final exams, causing postponements at the University of Massachusetts Dartmouth and the University of Illinois.
  • Instructure CEO Steve Daly apologized for the hack and assured that Canvas is fully operational and safe to use.

Sources & Links