Instructure Pays Ransom to Retrieve Canvas User Data
Instructure has paid a ransom to cybercriminals to recover compromised data from its Canvas learning management system, affecting approximately 275 million users across over 8,800 institutions.
Instructure, the company behind the Canvas learning management system, has paid a ransom to cybercriminals to recover compromised data affecting approximately 275 million users across over 8,800 institutions. The cybercriminal group ShinyHunters claimed responsibility for the breach, which involved unauthorized access to user information, including names, email addresses, student ID numbers, and private messages exchanged on the platform.
In a statement, Instructure confirmed that it had received digital confirmation of data destruction and assurance that no customers would be extorted as a result of the incident. The company emphasized its commitment to taking every step within its control to provide customers with peace of mind.
The breach led to significant disruptions, particularly during the final exam period for many institutions. Some universities postponed exams and extended assignment deadlines in response to the outage.
Instructure has not disclosed the amount paid to the hackers. The company continues to work with expert vendors to support forensic analysis, enhance security measures, and conduct a comprehensive review of the data involved.