← BackTue, May 12

Canvas paid hackers to delete stolen data from 72k students

Why this story

Affects 100k+ students globally with significant privacy implications and corporate malfeasance angle.

OPTIMIST VIEW

Instructure's deal with hackers prevented wider misuse of 72k student records — proactive damage control saves victims.

SKEPTIC VIEW

Hong Kong police already got 2 fraud reports from the breach — the 'deletion deal' didn't prevent criminal misuse.

INDUSTRY REALITY

EdTech security budgets lag financial services despite handling thousands of institutions — ransom cheaper than lawsuits.

Hidden Truth
Hidden truth: The 72k figure is only Hong Kong's count — Instructure won't reveal the global scope of compromised records.
Read the full breakdown →

Should companies be allowed to pay ransoms to protect customer data?