Instructure, which runs the widely-used Canvas online learning platform, announced it has successfully negotiated with cybercriminals to recover stolen student data following a major security breach that disrupted education for millions during finals season.
The company disclosed in a statement that it “reached an agreement with the unauthorized actor involved in this incident,” though officials declined to specify whether money changed hands or reveal the identity of the attackers.
The cyberattack forced Instructure to temporarily shut down Canvas while conducting its investigation, preventing students and teachers from accessing the platform they depend on for coursework and grades.
A criminal organization calling itself ShinyHunters took credit for the security breach, demanding ransom payments and threatening to release personal information from approximately 9,000 educational institutions globally, affecting roughly 275 million users. The group initially set a May 6 deadline before extending it, suggesting some schools had begun negotiations.
Under the negotiated settlement, Instructure recovered the compromised data and obtained what the company described as “digital confirmation” through “shred logs” proving the hackers eliminated any remaining copies from their systems.
However, company officials acknowledged the inherent uncertainty in dealing with criminal organizations, stating they cannot guarantee complete data destruction.
“While there is never complete certainty when dealing with cyber criminals, we believe it was important to take every step within our control to give customers additional peace of mind, to the extent possible,” Instructure explained.
According to Steve Proud, Instructure’s chief information security officer, the compromised information included student identification numbers, email addresses, names, and platform messages. The company emphasized that passwords, birth dates, government IDs, and financial details remained secure.
Instructure reported it has enlisted “expert vendors” to conduct thorough forensic examination, strengthen security measures, and perform detailed analysis of all affected information.
The platform shutdown created widespread anxiety among students and educators who suddenly lost access to essential academic tools during one of the most critical periods of the school year.
Canvas serves as the backbone for modern education, functioning as a digital gradebook, repository for lecture materials and assignments, discussion forum for collaborative projects, and communication channel between students and instructors.
Many educational institutions also rely on the platform for online testing and as a submission portal for final projects and research papers.
