Sounds like a ransom was paid:
> With that responsibility in mind, Instructure reached an agreement with the unauthorized actor involved in this incident. As part of that agreement:
> The data was returned to us. We received digital confirmation of data destruction (shred logs).
> We have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise.
> This agreement covers all impacted Instructure customers, and there is no need for individual customers to attempt to engage with the unauthorized actor.
