A cyber attack that shut down Canvas at school districts, colleges and universities has come to an end, according to Instructure, the parent company of Canvas.

Yesterday, the company announced it had reached a deal with the “unauthorized actor” behind the Canvas shutdown.

Hackers returned all stolen information and destroyed their copies, Instructure said.

Instructure CEO Steve Daly issued a public apology and launched a new incident update page on Instructure’s website for future cybersecurity concerns.

The company chose to put Canvas in lockdown after hackers accessed sensitive information and left a message on some schools’  Canvas login pages.

ShinyHunters, the hackers who took credit for the shutdown last week, said in the message that schools had until May 12 to make a deal or they would release sensitive data, including student ID numbers, email addresses and messages between Canvas users.

Instructure said its agreement with the hackers meant that no schools need to contact the hackers.

The shutdown had varying effects across Idaho, where almost every college or university uses Canvas.

Saturday, May 9, Boise State University announced that it reopened Canvas for students.

“The university recognizes that this outage occurred during a particularly demanding point in the semester and has affected coursework, exams and assignment submissions,” said the message to students and faculty.

The cyberattack landed amid Boise State’s finals week, leading the university to cancel all Friday, May 8 exams, and directing instructors to finalize students’ grades without the exams.

The attack interrupted finals at Idaho State University as well. University officials canceled all assignments and exams mid-Thursday, May 7, as the Idaho State Journal reported.

At the University of Idaho, the outage lasted only a few hours on Thursday, according to spokesperson Jodi Walker. Final exams at the U of I are proceeding as scheduled.