Stolen data from Canvas returned after Cyberattack

(CNN)– Data stolen in a cyberattack that shut down Canvas, an education platform used by schools and universities across the country has been returned.

Monday, May 11, 2026, parent company Instructure Holdings, INC, said hackers accessed usernames, email addresses, enrollment information, and messages.

Information including course content, submissions, and login credentials was not compromised.

A ransom note signed by the hacking group appeared on Canvas sites last week.

The hackers claimed to have breached data from 275 million users, and gave schools until May 12 to negotiate a settlement.

Instructure says it received digital proof the data has now been deleted, and that customers would not be extorted.