Instructure Strikes Deal with ShinyHunters to Prevent Canvas Data Leak

Instructure, the company behind the educational platform Canvas, reached an agreement with the cybercriminal group ShinyHunters to return and destroy stolen data, preventing a public leak of millions of student records. The deal was struck to mitigate the exposure of sensitive information following a cyberattack. No specific dates, technical details, or exact number of affected records were disclosed in the report. The incident involved a ransom negotiation to avoid the release of compromised data. ShinyHunters, known for high-profile data breaches, was the threat actor involved. The agreement ensures the stolen Canvas data will not be published or sold.