Instructure, the company behind the Canvas educational platform, says it has reached an agreement with the party behind a recent cyberattack to delete data that was stolen. Multiple outlets report that the breach disrupted online learning activities for universities, with some schools facing delays and operational issues. Several sources add that the incident occurred while many students were preparing for or taking final exams, contributing to widespread confusion and disruption for students and faculty.
According to these reports, Instructure describes the arrangement as an agreement with the “unauthorized actor” involved in the incident, with the stated goal of removing the stolen information. The coverage does not provide detailed technical findings of the breach, including the specific types of data taken, the full extent of affected accounts, or the timeline for deletion. The outlets also do not describe financial or legal terms of the deal.
Overall, the reporting centers on the company’s statement that it has made an agreement aimed at deleting the stolen data, following a cyberattack that led to notable short-term fallout for educational institutions using Canvas.
