Canvas breach ends as hackers delete stolen data after deal

Instructure, the company behind the Canvas learning platform, says it reached a deal with the hackers (ShinyHunters) responsible for a major breach, secured the stolen data back, and obtained digital proof that remaining copies were destroyed via shred logs. The incident compromised student IDs, email addresses, names and messages for thousands of schools and hundreds of millions of people, though no passwords or financial data were found. Canvas was taken offline during the investigation, and the company is conducting forensic work and hardening its systems while students faced finals-related disruptions.