Canvas parent company pays hackers to recover stolen student data

Canvas's parent company confirmed paying hackers to recover stolen student data after a ransomware attack. The payment decision was influenced by operational and financial calculations, including the high cost of prolonged recovery and service restoration, especially in education. Attackers exploited trust in the Canvas platform, highlighting a broader trend of exploiting legitimate functionalities rather than traditional technical weaknesses.