Instructure, the company behind Canvas learning software, paid cybercriminals to delete stolen student data after a major hack disrupted 9,000 universities across the US, Canada, Australia, and UK last week.
The Shiny Hunters group threatened to release 3.5 terabytes of student and university data unless paid in bitcoin. Students taking exams were particularly affected, with some losing work mid-test when ransom messages appeared on their screens.
Instructure confirmed it "reached an agreement" with the hackers, who promised to delete the data and not extort institutions. However, paying ransoms goes against law enforcement advice and offers no guarantee data is actually destroyed. The breach was discovered April 29th, marking the third time Shiny Hunters has targeted Canvas.
Source: BBC