Instructure said it reached an “agreement” with threat actors after ShinyHunters infiltrated Canvas in repeated attacks, causing widespread disruptions for schools and universities. The company said stolen data was returned and it received digital confirmation of data destruction, but reports indicate Canvas data was exposed before service interruptions, and federal action remains unclear.