Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124

Instructure, the company behind the Canvas learning management platform, says it has “they agreed” by hackers who hacked its systems last week to prevent the hack from leaking online.
Hacker group ShinyHunters claimed responsibility for the attack in the past Canvas has been taken offline for a while. The group threatened to release 3.5 terabytes of student data if the ransom demands of the “termination” were not met. Now, Instructure says the stolen data has been returned as part of an undisclosed “deal” with the hackers, along with a promise that “no Instructure customers will be charged as a result of this incident.”
“We understand how unpredictable things like this can be, and protecting our community remains our top priority,” Instructure said in a recent statement. “In consideration of this responsibility, Instructure has partnered with an illegal actor who has done this.”
Studies don’t clearly state that they paid ShinyHunters, but these updates reveal more. The ransom payment can go support some ransomware and there is no guarantee that the hacking group will be on its commercial side. Instructure said it received evidence that the stolen data was destroyed (which begs the question of how the data was “recovered”), and that its contract covers all customers affected by the breach.
“While there is no absolute certainty when dealing with cybercriminals, we believe it is important to do everything we can to give customers peace of mind, as much as possible. We continue to work with professional vendors to support our analysis, strengthen our environment, and review the details of the issues involved.”
Most Canvas systems have it since he was reinstatedand Instructional plans to share details about the attack in tomorrow’s webinar. Last week, Instructure said hackers used Free-For-Teacher accounts to breach its systems, and responded by temporarily shutting down their accounts. Education has not announced when the Free-For-Teacher accounts will be restored.