Instructure, which operates the Canvas learning platform, has reached a deal with hackers to delete stolen student and faculty data following last week's cyberattack that disrupted finals across institutions.
The breach of Canvas, a widely-used online learning system, caused significant disruption for students and educators mid-examination cycle, forcing delays to some final exams.
Instructure announced it "reached an agreement with the unauthorized actor involved in this incident" to remove the pilfered data. The company did not disclose specific details about the negotiated terms or timeline for deletion.
The attack highlighted vulnerabilities in educational technology infrastructure relied upon by millions of students globally. Canvas supports learning management across universities, colleges, and K-12 institutions.
Instructure has not publicly stated what data was accessed or how many users were affected. The company typically provides additional information in follow-up security advisories.
The deal represents an unusual outcome in ransomware cases, where attackers typically demand payment or threaten to sell stolen information. Instructure's decision to negotiate rather than pursue other options signals the scale of the breach and pressure from affected institutions.
Major artificial intelligence companies have issued urgent warnings that a significant cybersecurity threat could materialize within months. The alert comes as hackers continue targeting critical infrastructure across the United States.
Authorities have arrested two alleged members of TeamPCP, a hacking group responsible for infecting over 1,000 organizations through supply-chain attacks.
A Georgia police officer used Flock surveillance technology to track the movements of his ex-partner and another officer after their affair ended, according to internal investigation records.
McKesson, a major healthcare and pharmaceutical distributor, confirmed a cybersecurity incident involving unauthorized access to third-party applications. Extortion group ShinyHunters claims responsibility for stealing 284 million patient data records.