Instructure Reaches Agreement with ShinyHunters Following Canvas Ransomware Attack

Instructure, the owner of the learning management system Canvas, announced it reached an agreement with the cybercriminal group ShinyHunters following a ransomware attack. The breach involved unauthorized access to Canvas user data, though specific details about the compromised information or attack timeline were not disclosed. No technical indicators, such as CVE IDs, attack vectors, or exact dates of the incident, were provided in the report. The agreement suggests a resolution was negotiated, but the terms, including whether a ransom was paid, remain unspecified. The incident highlights the impact of ransomware on educational platforms, though no further operational or financial consequences were detailed.