---
title: "Canvas reaches deal with hackers to return data, including Hong Kong users"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/286201937.md"
description: "Canvas, the education platform, has reached an agreement with hackers to return data compromised in a global breach affecting 72,571 users in Hong Kong. Instructure, Canvas's parent company, announced a webinar to discuss the attack and security measures. The breach impacted around 9,000 institutions worldwide. Instructure confirmed that no customers would be extorted and that the agreement covers all affected clients. The Office of the Privacy Commissioner reported the exposure of personal information from seven local educational institutions. Canvas has over 30 million active users globally."
datetime: "2026-05-13T05:35:44.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/286201937.md)
  - [en](https://longbridge.com/en/news/286201937.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/286201937.md)
---

# Canvas reaches deal with hackers to return data, including Hong Kong users

Canvas, the education platform hit by a global data breach affecting 72,571 Hongkongers, has reached an agreement with the hackers to return all compromised data. Instructure, the parent company of Canvas, has said it would hold a webinar for its leadership on Wednesday to provide details of the attack and discuss measures to “harden the system”. The breach, which has been unfolding since last Thursday, is estimated to have affected about 9,000 institutions worldwide. In a statement on its website, Instructure said it had reached an agreement with the attacker that included the return and destruction of any data stored by the hackers. “We have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise,” it said. “This agreement covers all impacted Instructure customers, and there is no need for individual customers to attempt to engage with the unauthorised actor.” The company added that it would continue its forensic analysis and share details of the cause of the incident to help the wider community defend against similar threats. On Tuesday, the Office of the Privacy Commissioner for Personal Data said the incident had exposed the personal information of 72,571 students and staff in Hong Kong. Seven local educational institutions, including the Hong Kong University of Science and Technology, Polytechnic University and City University, reported breaches to the watchdog. The other four institutions are the Hong Kong Academy for Performing Arts, the Hong Kong Art School, the Hong Kong Institute of Construction and Hong Kong Education City, a wholly owned government subsidiary. Police also received two reports related to the incident. According to Instructure, Canvas has more than 30 million active users worldwide, with clients ranging from kindergartens to higher education institutions.

## Related News & Research

- [NVDA Stock Alert: What to Know as Nvidia Debuts New Chips for PCs](https://longbridge.com/en/news/288464273.md)
- [Acer’s launching a Linux handheld for streaming your PC games](https://longbridge.com/en/news/288107011.md)
- [15:40 ETIndustrial Acceptance Corp. - Media Notice](https://longbridge.com/en/news/288318854.md)
- [Patriot Software Marks America's 250th With 50% Off for 6 Months for New Customers](https://longbridge.com/en/news/288089388.md)
- [Customising for customers? Issues in 5G slicing spark net neutrality debate](https://longbridge.com/en/news/288104132.md)