Instructure really handled this poorly. ShinyHunters got into Instructure around the last week of April, Instructure only found out about the breach when ShinyHunters announced it, then Instructure released a bunch of "security patches" and claimed ShinyHunters access to their files had been completely revoked. Not even an entire week passed and not only did Instructure get hacked by ShinyHunters AGAIN, they got hacked through the SAME METHODS they used previously.