Business · CBS News Technology
Canvas' parent company strikes agreement with hackers to delete stolen data
Compiled by KHAO Editorial — aggregated from 3 sources. See llms.txt for citation guidance.
✓ KHAO Verified
The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that created chaos for students, many of them in the middle of finals.
Key facts
- A hacking group named ShinyHunters claimed responsibility for last week's breach, threatening to leak data involving nearly 9,000 schools worldwide and 275 million individuals if schools did not pay
- Instructure CEO Steve Daly also posted an apology about the attack
- The data breach appeared to involve student ID numbers, email addresses, names and messages on the Canvas platform, Instructure's chief information security officer, Steve Proud, said earlier
- Instructure, the parent company of Canvas, said in an online post that it "reached an agreement with the unauthorized actor involved in this incident
Summary
Instructure, the parent company of Canvas, said in an online post that it "reached an agreement with the unauthorized actor involved in this incident. The company didn't provide any details on the agreement, including whether it involved a payment, and didn't elaborate who was behind the hack. "You deserved more consistent communication from them, and they didn't deliver it," Daly said. A hacking group named ShinyHunters claimed responsibility for last week's breach, threatening to leak data involving nearly 9,000 schools worldwide and 275 million individuals if schools did not pay a ransom by May 6.