Connect with us

News

Instructure strikes deal with hackers who breached it twice

info

Published

on

Shiny extortion.jpg

Instructure, the maker of the popular school information portal Canvas, said on Tuesday it has “reached an agreement” with the hackers who breached its systems twice, stole a huge amount of student and staff data, and disrupted thousands of schools that rely on the company’s software.

ShinyHunters, a financially motivated cybercrime group, took credit for the April 29 data breach, claiming to have stolen student and staff data, including the personal information, of a total 275 million people. The hackers said they had compromised Canvas, which nearly 9,000 schools use to manage their students’ data and coursework.

The hackers last week breached the company for a second time, defacing the Canvas login pages on school websites, as part of efforts to pressure the company into paying their ransom.

Instructure said on its incident page late on Monday that as part of the agreement, the hackers had provided evidence that the stolen data was destroyed, and that Canvas customers would not be extorted. 

The company acknowledged that there is “never complete certainty” when negotiating with cybercriminals, but noted that customers should not have to engage with the hackers.

Financial terms of the agreement were not disclosed, and Instructure did not say how much it paid the hackers. Instructure spokesperson Brian Watkins did not respond to a request for comment, or answer questions about the agreement when contacted on Tuesday.

In a post on its leak site, which TechCrunch has seen, ShinyHunters was threatening to publish the stolen data it stole from Instructure if the company did not pay their extortion demand. 

As of Tuesday, the listing had been removed from the ShinyHunters’ page, indicating that a ransom may have been paid.

A representative from ShinyHunters told TechCrunch: “The data is deleted, gone. The company and it’s [sic] customers will not further be targeted or contacted for payment by us.”

It’s not clear why Instructure paid the hackers. Governments, including the United States, have long urged victims of cybercrime not to pay ransoms to hackers, as this helps cybercriminals profit from their attacks. Security researchers have argued that victims cannot trust the word of malicious hackers — some cybercriminals have been found holding on to stolen data despite saying they had deleted it so they could continue extorting their victims.

The hack on Instructure mirrors a cyberattack on PowerSchool, which was hit by a massive data breach affecting 70 million students and staff in 2024. PowerSchool, which also makes school information software, paid the hackers to return the stolen data, but several of its customers were later extorted by another crime group that showed data from the breach that had not been destroyed.

The FBI said in a statement last week that it was “aware” of the system disruption affecting schools and educational institutions around the United States. The notice did not name Canvas, but it did mention that victims should “not send payment or respond” to the demands of cybercriminals.

The data stolen from Instructure, some of which TechCrunch has seen, includes students’ names, their personal email addresses, and messages exchanged by teachers and students, including private and personal information.

On its website, Instructure acknowledged that hackers had breached the company’s systems twice in under a year, but said that the two breaches were “distinct events” that involved different systems. 

Instructure said it was still investigating the breach and validating its findings.

It’s not clear who at Instructure oversees or is responsible for cybersecurity, if not the company’s chief executive, Steve Daly. When contacted by TechCrunch, Instructure would not say if Daly plans to resign following the data breaches.

Are you a Canvas administrator or school notified about the breach? Have you received an extortion demand from the hackers? We want to hear from you. To contact this reporter securely, reach out via Signal username zackwhittaker.1337.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

Nwabali Appears Good Enough To Start For Super Eagles Against Russia On Tuesday

info

Published

on

IMG 20261004 WA0006.jpg

Back-to-form Chippa United of South Africa goalkeeper, Stanley Nwabali appears good enough to start for Nigeria against Russia in Tuesday’s international friendly match between both nations.

Sports247 gathered that, although many Nigerian football fans slammed Nwabali for letting in three goals during last Tuesday’s 2027 Africa Cup of Nations qualifier defeat away to Guinea-Bissau, Eagles’ coach, Eric Chelle is keeping faith with him.

A strong hint in this direction emerged from reports citing Nwabali in training with the Eagles on arrival in Moscow ahead of Tuesday’s game, which comes exactly a week after the Nigerian team’s ignominious 3-0 loss to Guinea-Bissau, who now top their qualifying group with six points.

The friendly with Russia was initially meant to help Chelle test new players ahead of the resumption of AFCON 2027 qualifiers in November, but the report from the team’s camp in Moscow indicates that the Franco-Malian tactician will now count on some of his established regulars for Tuesday’s game.

Information provided by the communications department of Nigeria Football Federation (NFF) revealed that Nwabali was one of prominent Eagles’ players who were involved in the team’s first training session ahead of Tuesday’s game.

The report disclosed, “The Super Eagles have had their first training session in Nizhny Novgorod, as they prepare for Tuesday’s international friendly match against Russia’s senior men national team.

“The group of 17 players that trained on Saturday included 101-cap Moses Simon, goalkeeper Stanley Nwabali, defenders Benjamin Fredricks and Emmanuel Fernandez, as well as forwards Kelechi Iheanacho and Akor Adams.

“The team will have two more training sessions on Sunday and Monday before the encounter (which is scheduled to take place) at the Nizhny Novgorod Stadium on Tuesday evening.

“On 6 June last year, Russia and Nigeria played to a 1-1 draw at Moscow’s Luzhniki Stadium, with the Russians going in front through an own goal by defender Semi Ajayi, before Tolu Arokodare levelled for the Super Eagles.”

Sports247 gathered further that, while Nwabali appears set to start the game on Tuesday, he will likely bow at half time and give way to Charlton Athletic of England’s new signing, Arthur Okonkwo, who is the preferred first choice of many Nigerian football fans.

Continue Reading

News

2027: Don’t weaponize religion, ethnicity, regional sentiments – CAN charges politicians 

info

Published

on

CAN.jpg

Ahead of the 2027 general elections, the Christian Association of Nigeria, CAN, has called on political actors to place Nigeria above their personal interest.

CAN made the call when its President, Archbishop Daniel Okoh addressed the press as part of the activities to mark its 50th anniversary.

“We expect political campaigns to be issue-based and focused on competing ideas about how to improve the lives of Nigerians.

Political parties and candidates must resist the temptation to weaponize religion, ethnicity and regional sentiments,” Archbishop Okoh said.

Recommended

The apex Christian body noted that Nigerians have witnessed enough bloodshed and division during election periods, adding, “We do not want another generation of Nigerian youths sacrificed on the altar of political ambition.”

CAN called on political leaders to take responsibility for the conduct of their supporters and discourage incitement, hate speech, violence and intimidation.

“Every Nigerian must be free to vote according to his or her conscience, without coercion, intimidation or manipulation,” Okoh added.

CAN said it will continue to support credible democratic processes, civic education, peaceful elections and electoral integrity.

“Our message to politicians is clear: Elections should be a contest of ideas, not a contest of violence; a competition for public service, not a licence for personal destruction,” he stated.

Speaking further, CAN said it is deeply concerned about the economic hardship confronting ordinary Nigerians.

“The rising cost of living has placed enormous pressure on families. Young people are struggling to find meaningful employment. Small businesses are struggling to survive. Parents are finding it increasingly difficult to provide food, healthcare, education and housing for their families,” CAN noted.

“The Church sees these realities every day.

People come into our churches not only with spiritual needs but with hunger, unemployment, medical bills, school fees, housing challenges and uncertainty about the future.

“We, therefore, encourage government to continue pursuing policies that stimulate productive economic activity, create meaningful employment, support small and medium-sized enterprises and protect the most vulnerable members of society.

“Every economic policy must ultimately be judged by its impact on the people. Economic reform cannot become an abstract exercise divorced from the realities of ordinary families. 

“We must also learn as a nation to raise and place in public office leaders who understand that public office is a trust and not an opportunity for personal enrichment,” Okoh said.

Continue Reading

Trending