Canvas hack: is it ever a good idea to pay a ransom, and what happens to the data?

The US tech firm Instructure, operator of the education platform Canvas, has reached an agreement with hackers behind a ransomware attack that stole hundreds of millions of students' data. The company's language suggests a ransom may have been paid, despite advice against doing so. The attack caused outages and disrupted school services.