Instructure, maker of the Canvas school software used by nearly 9,000 schools, has reached an undisclosed financial agreement with the ShinyHunters cybercrime group after being breached twice. The hackers claimed to have stolen data on 275 million students and staff, defaced school login pages to pressure payment, and threatened to publish the data. Instructure says the hackers provided evidence of data destruction and pledged not to extort customers, though the company acknowledged there is 'never complete certainty' when dealing with cybercriminals. Security experts and the FBI have warned against paying ransoms, noting that hackers sometimes retain stolen data despite claiming otherwise — a pattern seen in the similar PowerSchool breach.
