Sounds like a ransom was paid:

> With that responsibility in mind, Instructure reached an agreement with the unauthorized actor involved in this incident. As part of that agreement:

> The data was returned to us. We received digital confirmation of data destruction (shred logs).

> We have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise.

> This agreement covers all impacted Instructure customers, and there is no need for individual customers to attempt to engage with the unauthorized actor.