Instructure says it reached an agreement with hackers after Canvas breach disrupted schools and exposed data
The Facts
- Instructure said it reached an agreement with the unauthorized actor behind the Canvas cyber incident.
- The company said the stolen data was returned and that it received digital confirmation that the data was destroyed.
- Instructure said the agreement covers affected customers and that customers do not need to engage individually with the attacker; it also said customers would not be extorted as a result of this incident.
- The breach disrupted Canvas service and affected schools and universities during exam or finals periods, interrupting access to coursework, assignments, grades or testing.
- Multiple reports said the incident affected roughly 9,000 educational institutions across countries including the United States, Canada, Australia and the United Kingdom.
- ShinyHunters claimed responsibility for the breach and threatened to publish stolen data unless a settlement or ransom demand was met.
- The scope of the stolen information was reported as several terabytes of data involving student and school records, though reports differ on the exact amount.
- It remains unresolved in Instructure's public statement whether the agreement involved a payment, even as some later reporting said the company acknowledged paying the attackers.
How left and right are reading this
- Both agree
- Students and schools bore real costs from a breach that disrupted access to coursework, grades and testing during finals while exposing large volumes of student and school records, a harm neither framing treats as incidental.
- They split on
- Whether the story is chiefly about the immediate damage to institutions and students relying on a single platform, or about the precedent set if attackers can extract an agreement after disruption and data-theft threats.
Analytical frames for this storyTap to explore
Context
What is Canvas, and who uses it?
Canvas is a cloud-based learning management platform used by schools and universities to handle coursework, assignments, grades and class materials. Reports say it serves more than 8,000 institutions and tens of millions of users worldwide CNN International,CNN Español.
What did Instructure say happened to the stolen data?
Instructure said the data was returned to the company and that it received digital confirmation of destruction, sometimes described as "shred logs." The company also said affected customers would not be extorted as a result of the incident CBC News,Deutsche Welle,CNA.
Do we know whether Instructure paid a ransom?
The company's public statement did not disclose whether money changed hands, and several reports noted that this was unclear at first Guardian,U.S. News & World R…. A later report said Instructure's CEO confirmed the company paid the hackers, but the amount was not disclosed TechRadar.
View all 100 sources
Wire services (3)
Independent coverage (50)
TechNaduInstructure Pays Ransom Following Canvas Cyberattack
WinBuzzerCanvas EdTech Platform Breach: Instructure Reaches Ransom De...
TechRoundExperts Discuss: What Does The Canvas Cyberattack Say About ...
ComputingCanvas owner reaches deal with ShinyHunters after global dat...
Newcastle HeraldHunter public school says student and staff data safe after ...
News.com.auMajor update after Aussie student data hacked
South China Morning PostCanvas reaches deal with hackers to return data, including H...
The VindicatorDeal reached with hackers to delete data stolen from Canvas
www.diariolibre.comPlataforma educativa de EE. UU. negocia con hackers y recupe...
iTnewsCanvas' parent company reaches agreement with hacking group ...
ABC 4Three separate lawsuits filed against Instructure after data...
The Sydney Morning HeraldRansom 'paid' to hackers who crippled online learning in Aus...
The AgeRansom 'paid' to hackers who crippled online learning in Aus...
xataka.com.mxInstructure quiso negar el mayor hackeo de la industria educ...
The GazetteInstructure makes deal with hackers; Iowa schools resume use
KXXVDeal reached with hackers to delete data stolen from the Can...
ABC 4Instructure reaches agreement with hacker after data breach,...
Government TechnologyInstructure Makes Deal With Hackers as Experts Talk Data Sec...
Noticias SINCanvas recupera datos robados a 9.000 escuelas tras negociar...
TEMPO.COCanvas Owner Secures Student Data in Deal with Hacking Group
CBS NewsNorth Texas schools still feeling impacts of Canvas hack
CBS NewsHow North Texas schools were impacted by the recent Canvas h...
https://www.wect.comNorth Carolina restores Canvas access after cyberattack affe...
Radio CanadaCanvas hack: Company strikes deal with hackers after massive...
KSTUDeal reached with hackers to delete data stolen from Canvas ...
CNETCanvas Hack Aftermath: Owner Instructure Reaches Deal With H...
Boston HeraldTicker: 'Golden Dome' estimated to cost $1.2T; Canvas hack d...
WTOPEmpresa matriz de Canvas informa que recuperó los datos roba...
CNN EspañolEmpresa matriz de Canvas informa que recuperó los datos roba...
Deutsche WelleCanvas owner secures student data in deal with hacking group
Security BoulevardThe Canvas Breach Shows What Happens When SaaS Platforms Bec...
UPIData stolen from Canvas returned, parent company says - UPI....
Star TribuneDeal reached with hackers to delete data stolen from the Can...
WRALCanvas owner reaches agreement with hackers, as experts warn...
WebProNewsShinyHunters' Canvas Breach Exposes Education's Fragile Depe...
The American BazaarCanvas parent firm reaches deal with hackers after massive b...
The News InternationalCanvas reaches agreement with hacking group over massive dat...
CBC NewsInstructure strikes deal with hackers after massive Canvas c...
WXIIDeal reached with Canvas hackers to delete data stolen from ...
KULR-8 Local NewsCanvas says stolen user data was recovered and deleted after...
Democratic UndergroundCanvas platform strikes deal with hackers to delete students...
Washington TimesInstructure, company behind Canvas learning platform, reache...
The LogicStolen data from education platform Canvas destroyed after a...
The GuardianCanvas platform strikes deal with hackers to delete students...
Houston ChronicleEmpresa educativa de EEUU llega a acuerdo con hackers para b...
TheRegister.comCongress investigates Canvas breach as company pays ransom
news24Hackers who hit SA students reach deal with Canvas
https://www.wkyt.comStolen information returned to Canvas and allegedly deleted ...
MashableInstructure strikes deal with ShinyHunters before ransom dea...
FirstpostAmerican academic platform Instructure strikes deal with hac...
About these frames
The Watchdog: Wrongdoing, responsibility, corruption, transparency. Who knew what, when, and what they did about it.
The Advocate: Liberty, speech, privacy, autonomy, rights, consent, choice. What freedoms are at stake.
The First Responder: Who gets hurt or helped. Quality of life, vulnerable groups, public health, human cost and benefit.
The Architect: Stability, law, enforcement, institutional design, separation of powers, regulatory process, rule of law. How are order and governance maintained?
The Guardian: Sanctity, degradation, bodily autonomy, moral boundaries, human dignity, bioethics, environmental purity. Where are the lines that should not be crossed?
See this differently than someone you know would? Two ways to keep it going.
The dial works on any URL — paste an article you read elsewhere this week.