Instructure Reaches Deal With Hackers to Return Canvas User Data

May 12, 2026, 12:01 PM UTC

Instructure Inc. said it reached an agreement with hackers who disrupted universities’ online coursework and testing on the company’s Canvas platform, with the attackers returning stolen data and pledging not to extort the education software maker’s customers.

A cybercrime group took responsibility for the attack on Instructure that disrupted Canvas, a product that university students use to submit coursework. Attackers had accessed usernames, email addresses and enrollment information, the company said. An investigation found no evidence that passwords, dates of birth, government identifiers or financial information were stolen.

Instructure didn’t say whether the agreement announced Monday involved payment, but said ...

Learn more about Bloomberg Law or Log In to keep reading:

See Breaking News in Context

Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.

Already a subscriber?

Log in to keep reading or access research tools and resources.