Canvas Secures Data with Hacker's Agreement: A Cybersecurity Update

Instructure, the parent company of the Canvas educational software, announced Monday that it had reached a settlement with the cybercriminal group ShinyHunters following a breach of its systems. The agreement ensures all stolen data was returned and destroyed, with assurances that customers won't face extortion.

The hacking group confirmed to Reuters that they have deleted the data, indicating no further targeting of the company or its clients will occur. However, the hacker group refused to provide more details about the resolution.

Meanwhile, the House Homeland Security Committee has asked Instructure's CEO or another senior executive to testify regarding their response to the multiple breaches, the extent of stolen data, and their collaboration with federal law enforcement agencies like CISA. Instructure has yet to comment on this request.

(With inputs from agencies.)