Deal reached with hackers to delete data stolen from the Canvas platform
fortran77
24 points
16 comments
May 14, 2026
Related Discussions
Found 5 related stories in 83.4ms across 8,303 title embeddings via pgvector HNSW
- Canvas hack: company pays criminals to delete students' stolen data GaryBluto · 17 pts · May 12, 2026 · 68% similar
- Canvas Breach Disrupts Schools and Colleges Nationwide lschueller · 14 pts · May 08, 2026 · 60% similar
- Canvas is down as ShinyHunters threatens to leak schools’ data stefanpie · 487 pts · May 07, 2026 · 59% similar
- ShinyHunters claims data theft from 8,800 schools (Instructure/Canvas) tfirst · 140 pts · May 07, 2026 · 58% similar
- Hackers deface school login pages after claiming another Instructure hack Veiled · 27 pts · May 07, 2026 · 55% similar
Discussion Highlights (8 comments)
fortran77
They're paying them to delete the data? > The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that created chaos for students, many of them in the middle of finals. How stupid can they be? > The company acknowledged that there was no way to be sure that the data was erased for good, and said it took action because of concerns about potential publication of the data. Why is the U.S. allowing Canvas to fund North Korean or Russian cyberterrorists?
greatgib
So stupid, they will pay but have no proof that the hackers will not keep it to leak or sell it again in a few years...
iqihs
The parent company should face severe penalties for allowing this kind of breach to happen and also for terrorist financing. We are really living in the Stone Age of information security.
baggy_trough
These deals should be illegal.
victorbjorklund
Really dumb. Just a way to cover their own ass. Of course the hackers won’t actually delete the data. This is just so they can claim it was deleted when everyone knows better.
ajay-b
I disagree with this path, there is no guarantee, nor can there be, that the data will be deleted. It can be divided up and sold to others with no recourse. The hackers got their money, they are under no obligation to comply with th agreement, and there's no one can could enforce it.
password4321
This is a duplicate of the following discussion 2 days ago with 258 points and 249 comments: https://news.ycombinator.com/item?id=48103668 Instructure pays ransom to Canvas hackers
registeredcorn
> The company didn’t provide any details on the agreement, including whether it involved a payment, and didn’t elaborate who was behind the hack. Oh, cool! Maybe they all just sat down with a nice cup of coffee and the hackers decided to delete the data out of the goodness of their hearts.