Canvas hack: Company pays criminals to delete students' stolen data

Instructure paid hackers to delete stolen data after a Canvas breach disrupted exams globally, sparking security concerns.

By Content Team

May 17, 2026

ON THIS PAGE

Instructure, the company behind Canvas software used by 9,000 universities worldwide, paid hackers to delete stolen student data after a major cyberattack last week. The breach by the Shiny Hunters group disrupted exams across the US, Canada, Australia, and UK when Canvas went offline.

The hackers stole 3.5 terabytes of data and threatened to publish it online. Instructure confirmed reaching an "agreement" with the criminals, who promised to delete the data and not extort students or institutions. While the company won't reveal payment details, such deals typically involve bitcoin ransoms.

Students like Mississippi State's Aubrey Palmer saw ransom messages mid-exam, causing widespread confusion. Security experts warn paying hackers fuels more attacks and offers no guarantee data is actually destroyed.

Source: BBC

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo

Want more insights like this?