Canvas hack: Company pays criminals to delete students' stolen data