EdTech Firm Instructure Pays Ransom as U.S. House Starts Investigation

Instructure, operator of the Canvas learning platform used by thousands of schools and millions of users, was breached by the ShinyHunters group which claimed to have stolen ~3.65 TB of data from about 9,000 customers; after a second intrusion and public ransom demands the company paid the extortionists who provided returned data and 'shred logs', raising concerns about copies, downstream exposure, and regulatory scrutiny.