When a School Platform Becomes an Extortion Target, Trust Is the First Casualty

A Canvas incident ended with a ransom payment and a congressional inquiry, but the deeper story is about identity controls, token hygiene, and why “deleted” data is never a clean ending.