Canvas Maker Instructure Reaches Agreement With Cybercriminals
Canvas Maker Instructure Reaches Agreement With Cybercriminals
https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/
Publish Date: 2026-05-24 01:55:38
Source Domain: www.infosecurity-magazine.com
Summary:
Canvas Learning Management System provider Instructure has concluded an agreement with the ShinyHunters collective responsible for the recent data breach that affected nearly 9,000 educational institutions. The company has confirmed that all affected customers will be covered under this deal, which includes the return of stolen data and assurances that the cybercriminals have destroyed the stolen information. Though Instructure hasn’t explicitly stated whether a payment was made, this is typical of such criminal actions. Instructure has emphasized that it remains highly cautious about such dealings with cybercriminals and stressed that no further extortion attempts will be made to individual customers. The initial breach exposed around 275 million records, including usernames and email addresses, but fortunately, critical data such as course content and credentials were safeguarded. The attack led to a follow-up wave where login portals of about 330 institutions were defaced with ransom demands. Institutions are urged to remain vigilant against phishing risks despite the return of the stolen data. Instructure has temporarily paused the Free-For-Teacher version, revoked credentials, and intensified its security measures in response to the breach.
Key Points:
- Instructure has reached an agreement with the cybercriminals responsible for the breach affecting 9,000 educational institutions.
- The stolen data has been returned, and there are assurances that it has been destroyed, but no financial details were disclosed.
- Even with data returned, institutions should remain vigilant about follow-up phishing risks.
- The initial breach compromised about 275 million records, mostly user information, while safeguarding critical course data.
- Instructure is enhancing security measures and conducting a comprehensive review to mitigate future threats.
