The company behind Canvas says it has "reached an agreement" with the hackers who disrupted thousands of colleges and universities.

While students change passwords and watch out for imposter scams, schools should start scrutinizing their third party providers and practice for the next hack.

Cyberattacks on widely used third-party services like Canvas can expose sensitive data that hackers can later weaponize. Higher education institutions are often a prime target.