Instructure Reaches Deal With Hackers to Return Canvas User Data

Instructure Inc. said it reached an agreement with hackers who disrupted universities’ online coursework and testing on the company’s Canvas platform, with the attackers returning stolen data and pledging not to extort the education software maker’s customers.

A cybercrime group took responsibility for the attack on Instructure that disrupted Canvas, a product that university students use to submit coursework. Attackers had accessed usernames, email addresses and enrollment information, the company said. An investigation found no evidence that passwords, dates of birth, government identifiers or financial information were stolen.