Instructure Security Incident Update

Comments* moved to https://news.ycombinator.com/item?id=48103668 which is currently on the frontpage.

* except any that only make sense in this context

Sounds like a ransom was paid:

> With that responsibility in mind, Instructure reached an agreement with the unauthorized actor involved in this incident. As part of that agreement:

> The data was returned to us. We received digital confirmation of data destruction (shred logs).

> We have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise.

> This agreement covers all impacted Instructure customers, and there is no need for individual customers to attempt to engage with the unauthorized actor.