Instructure, the company behind the Canvas learning management platform used by schools and universities, says it has reached an agreement with hackers who disrupted services and stole student data tied to Canvas. Multiple outlets report that the attackers return the compromised data and pledge not to extort Instructure’s customers. Instructure does not provide details on what it offers or provides to the hackers in return for the data, and at least one outlet notes that the company does not disclose guarantees about the hackers’ future actions or promises. Separately, U.S. lawmakers call for more information about how the attackers gained access to Instructure’s systems and conducted breaches, which some reporting describes as occurring twice. They want answers regarding the security failures and the scope of data taken from students and other users of Canvas and related student data services. The company’s public statements focus on securing the return of stolen information, while additional questions remain about the circumstances of the intrusions and the terms of the agreement.