Connect with us

News

Instructure strikes deal with hackers who breached it twice

info

Published

on

Shiny extortion.jpg

Instructure, the maker of the popular school information portal Canvas, said on Tuesday it has “reached an agreement” with the hackers who breached its systems twice, stole a huge amount of student and staff data, and disrupted thousands of schools that rely on the company’s software.

ShinyHunters, a financially motivated cybercrime group, took credit for the April 29 data breach, claiming to have stolen student and staff data, including the personal information, of a total 275 million people. The hackers said they had compromised Canvas, which nearly 9,000 schools use to manage their students’ data and coursework.

The hackers last week breached the company for a second time, defacing the Canvas login pages on school websites, as part of efforts to pressure the company into paying their ransom.

Instructure said on its incident page late on Monday that as part of the agreement, the hackers had provided evidence that the stolen data was destroyed, and that Canvas customers would not be extorted. 

The company acknowledged that there is “never complete certainty” when negotiating with cybercriminals, but noted that customers should not have to engage with the hackers.

Financial terms of the agreement were not disclosed, and Instructure did not say how much it paid the hackers. Instructure spokesperson Brian Watkins did not respond to a request for comment, or answer questions about the agreement when contacted on Tuesday.

In a post on its leak site, which TechCrunch has seen, ShinyHunters was threatening to publish the stolen data it stole from Instructure if the company did not pay their extortion demand. 

As of Tuesday, the listing had been removed from the ShinyHunters’ page, indicating that a ransom may have been paid.

A representative from ShinyHunters told TechCrunch: “The data is deleted, gone. The company and it’s [sic] customers will not further be targeted or contacted for payment by us.”

It’s not clear why Instructure paid the hackers. Governments, including the United States, have long urged victims of cybercrime not to pay ransoms to hackers, as this helps cybercriminals profit from their attacks. Security researchers have argued that victims cannot trust the word of malicious hackers — some cybercriminals have been found holding on to stolen data despite saying they had deleted it so they could continue extorting their victims.

The hack on Instructure mirrors a cyberattack on PowerSchool, which was hit by a massive data breach affecting 70 million students and staff in 2024. PowerSchool, which also makes school information software, paid the hackers to return the stolen data, but several of its customers were later extorted by another crime group that showed data from the breach that had not been destroyed.

The FBI said in a statement last week that it was “aware” of the system disruption affecting schools and educational institutions around the United States. The notice did not name Canvas, but it did mention that victims should “not send payment or respond” to the demands of cybercriminals.

The data stolen from Instructure, some of which TechCrunch has seen, includes students’ names, their personal email addresses, and messages exchanged by teachers and students, including private and personal information.

On its website, Instructure acknowledged that hackers had breached the company’s systems twice in under a year, but said that the two breaches were “distinct events” that involved different systems. 

Instructure said it was still investigating the breach and validating its findings.

It’s not clear who at Instructure oversees or is responsible for cybersecurity, if not the company’s chief executive, Steve Daly. When contacted by TechCrunch, Instructure would not say if Daly plans to resign following the data breaches.

Are you a Canvas administrator or school notified about the breach? Have you received an extortion demand from the hackers? We want to hear from you. To contact this reporter securely, reach out via Signal username zackwhittaker.1337.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

2027: APC disowns Abayomi Hunye as its Ogun governorship candidate

info

Published

on

By

The All Progressives Congress, APC, has disowned Mr Abayomi Hunye, who claims to be its Ogun governorship candidate for the 2027 election, describing him as an imposter.

The party’s National Secretary, Senator Ajibola Basiru, in a statement on Monday in Abuja, said Senator Adeola Olamilekan remains the APC governorship candidate in the state.

“Hunye is not a member of the APC; in good standing, he was suspended from the party on April 7, 2026; he is an imposter currently on suspension,” he said.

He added that Hunye’s suspension was not arbitrary, but followed a petition from his Tube Ward in Ipokia Local Government Area.

Recommended

Basiru further stated that his suspension was driven by a grassroots decision, executive ratification and formal approval by the party’s State Working Committee.

“His suspension was ratified by the Ogun State Working Committee and communicated to the national headquarters.

“His recent self-declaration as the governorship candidate of our party for the 2027 election is completely false, unauthorised, and a mischievous act aimed at misleading the public,” he said.

Basiru listed the reasons adduced for his suspension to include: engaging in activities injurious to the party’s image, anti-party activities and deliberate actions aimed at causing disaffection and division among loyal members.

“Consequently, he lacks the legal and moral standing to represent the APC in any capacity.

“We reiterate that following the validly conducted primary election of the APC, the duly nominated and elected governorship candidate for the 2027 Ogun State election is Senator Adeola Olamilekan, with his running mate being Balogun Abiodun.

“This is in line with the provisions of the Electoral Act, 2026 and the guidelines of the Independent National Electoral Commission, INEC,” the APC national secretary said.

He said that the names and other particulars of Olamilekan and his running mate, Abiodun, had been successfully uploaded onto INEC’s portal.

The APC national secretary said that the commission had issued official acknowledgement slips confirming the duo as the duly recognised APC candidates for the Ogun 2027 governorship election.

“Any person, group or organisation that associates, collaborates or transacts any political business with Hunye under the guise of the APC does so at their own risk.

“The party will not be held liable for any financial loss, legal disputes or criminal liability that may arise from such dealings,” he said.

Basiru urged party supporters to remain calm, law-abiding and ignore any provocation from detractors aimed at disrupting the peace of the state.

He implored all concerned to contact the APC national secretariat through the office of its national secretary for clarification and official updates.

Continue Reading

News

‘You Already Have So Many Good Players’ — Masajedi Backs Nigeria’s Volleyball Talent For African Championship

info

Published

on

By

IMG 20260809 WA0227.jpg

Newly appointed Nigeria volleyball Technical Adviser Ryan Masajedi says the country has an abundance of talented players, but believes greater attention to fundamentals and positional discipline could help the national team compete strongly at the 2026 African Women’s Nations Volleyball Championship in Nairobi.

The Japanese tactician, who was unveiled by the Nigeria Volleyball Federation earlier this month, has immediately taken charge of preparations for the women’s senior team ahead of the continental championship, which begins in Nairobi on August 23. The tournament runs until September 5 and brings together 16 of Africa’s leading women’s volleyball nations.

READ ALSO: Nigeria’s Volleyball Development Excites NVBF’s NewTechnical Adviser Ryan Masajedi

Masajedi, who has previously worked with teams in Japan, Iran, Indonesia, Bangladesh and Italy, said he has been impressed by what he has seen from the Nigerian players since beginning work with the team. His coaching background includes a spell as assistant coach at Allianz Milano before taking up the Nigeria assignment.

“You already have so many good, talented and physically strong players,” Masajedi said.

“The only thing we were missing was the basic things, the fundamental techniques, which are most important.”

The 47-year-old coach explained that much of the team’s preparation has focused on ensuring that players understand exactly what is required of them in their respective positions.

“For each position, we made everything clear,” he said. “I was very happy with their efforts during this first period, and they have been developing well.”

Masajedi’s approach represents a significant change in Nigeria’s preparation, with the federation bringing in an experienced foreign technical adviser to strengthen the national teams ahead of major international competitions.

Nigeria Volleyball Federation president Musa Nimrod said the Japanese coach would work not only with the senior women’s team but also with the men’s national team and the federation’s wider development programmes.

“Coach Ryan Masajedi will immediately join the national women’s team in camp as preparations continue for the 2026 African Nations Championship in Kenya,” Nimrod said at the coach’s unveiling.

“He will also take charge of the men’s national team for the African Nations Championship in the Democratic Republic of Congo.”

The federation has also given Masajedi a broader development mandate, including visiting Nigeria’s six geopolitical zones to identify young talent and work with local coaches.

That long-term objective appears to fit the coach’s philosophy, with Masajedi stressing the importance of building players from the fundamentals upwards rather than relying solely on physical ability.

Nigeria’s immediate challenge, however, is in Nairobi, where the country will face some of the strongest teams on the continent.

The 2026 African Women’s Nations Volleyball Championship features 16 nations, including defending champions Kenya, Egypt, Cameroon, Rwanda, Algeria, Nigeria, Morocco and Uganda.

The stakes are also considerably higher than the African title alone.

The championship forms part of the qualification pathway for the 2028 Los Angeles Olympic Games and the 2027 FIVB Women’s World Championship. Under the continental qualification system, the African champion earns an Olympic quota, while the leading eligible teams can secure places at the 2027 World Championship.

Masajedi therefore knows his first major assignment with Nigeria carries enormous significance.

But after several weeks working with the players, the Japanese coach believes the raw material is already there.

“The players have been developing well,” he said, pointing to the response he has received from the squad during the intensive preparation period.

With Nigeria now heading into one of the biggest women’s volleyball tournaments on the continent, Masajedi’s challenge is to turn that talent into results — and potentially put Nigeria on the road to Los Angeles 2028.

Continue Reading

Trending