Instructure, the parent company of Canvas, said it reached an agreement with the attackers to return stolen data and destroy remaining copies after a breach that disrupted students and faculty during finals. ShinyHunters claimed responsibility for the attack, which reportedly affected nearly 9,000 schools and 275 million individuals. #Canvas #Instructure #ShinyHunters
Keypoints
- Instructure said it negotiated with the unauthorized actor behind the Canvas breach.
- The hackers returned the stolen data and claimed to destroy remaining copies.
- ShinyHunters said it was behind the attack and threatened to leak data from schools worldwide.
- The breach disrupted access for students and faculty, including during finals week.
- Exposed data may have included student IDs, emails, names, and messages, but not passwords or financial data.