The hacking group that targeted the Canvas educational tool and the parent company that owns the software struck a deal to secure ​stolen student and school data, the company said in a statement late ​Monday.