Instructure Inc., which runs the Canvas online learning portal, first disclosed “a cybersecurity incident perpetrated by a criminal threat actor” on May 1, according to a post on the company’s website