Canvas Secures Data with Hacker's Agreement: A Cybersecurity Update

Instructure, owner of Canvas, has struck an agreement with hacking group ShinyHunters, ensuring the return and destruction of stolen data. The agreement promises non-extortion of customers and acknowledges the breach to Congress. Further details on the nature of the breach and response actions remain undisclosed.

Instructure, the parent company of the Canvas educational software, announced Monday that it had reached a settlement with the cybercriminal group ShinyHunters following a breach of its systems. The agreement ensures all stolen data was returned and destroyed, with assurances that customers won't face extortion.

The hacking group confirmed to Reuters that they have deleted the data, indicating no further targeting of the company or its clients will occur. However, the hacker group refused to provide more details about the resolution.

Meanwhile, the House Homeland Security Committee has asked Instructure's CEO or another senior executive to testify regarding their response to the multiple breaches, the extent of stolen data, and their collaboration with federal law enforcement agencies like CISA. Instructure has yet to comment on this request.