Instructure settles with hackers following massive student data theft

Instructure confirmed a major Canvas breach attributed to the ShinyHunters extortion group that reportedly exfiltrated ~3.65TB of data affecting thousands of institutions and millions of users; exposed data reportedly includes names, emails, student IDs and messages (not passwords or financial data). The company revoked credentials, rotated keys, patched systems, temporarily disabled Free-for-Teacher accounts, and says it negotiated to have the data returned and destroyed while working with cybersecurity experts and regulators to investigate the incident.