CANVAS HACKERS AGREE TO DELETE STOLEN STUDENT DATA

The breach of Canvas, a widely-used online learning system, caused significant disruption for students and educators mid-examination cycle, forcing delays to some final exams. Instructure announced it "reached an agreement with the unauthorized actor involved in this incident" to remove the pilfered data. The company did not disclose specific details about the negotiated terms or timeline for deletion. The attack highlighted vulnerabilities in educational technology infrastructure relied upon by millions of students globally. Canvas supports learning management across universities, colleges, and K-12 institutions. Instructure has not publicly stated what data was accessed or how many users were affected. The company typically provides additional information in follow-up security advisories. The deal represents an unusual outcome in ransomware cases, where attackers typically demand payment or threaten to sell stolen information. Instructure's decision to negotiate rather than pursue other options signals the scale of the breach and pressure from affected institutions.