Canvas suffered a cyberattack by ShinyHunters, disrupting services globally and threatening to leak data unless talks begin by 12 May.