Instructure, parent company of the education platform Canvas, said it took “immediate steps” to contain the hack before calling law enforcement.