'You deserved more': Instructure CEO apologizes following Canvas hack, admits company paid hackers to get stolen data back

• Instructure confirmed paying ShinyHunters to delete stolen data and halt extortion
• Agreement included digital “shred logs” and covered all impacted customers
• Amount paid undisclosed; law enforcement warns ransom payments fund crime and don’t guarantee safety

Instructure has confirmed it paid ShinyHunters their ransomware demand in exchange for deleting the data and not targeting its customers in the future.

The news was confirmed by the company’s Chief Executive Officer (CEO), Steve Daly, who explained its response in a blog post.

“Instructure reached an agreement with the unauthorized actor involved in this incident,” the announcement reads. “As part of that agreement the data was returned to us, we received digital confirmation of data destruction (shred logs), we have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise.”