Instructure, a prominent educational technology company, has settled with hackers who breached its Canvas learning management system, exposing sensitive student data from schools and universities. The cybercrime group had threatened to publish the stolen information, prompting Instructure to reach an agreement to prevent further disclosure. As the developer of one of the world's most widely used learning management systems, Instructure's security incident has significant implications for the education sector. The breach highlights the vulnerability of educational institutions to cyber threats, particularly those targeting sensitive student data1. This settlement raises concerns about the potential for similar incidents in the future, emphasizing the need for robust security measures to protect sensitive information. The incident serves as a reminder that educational technology companies must prioritize cybersecurity to safeguard student data, making it a critical concern for practitioners and institutions relying on these systems.