canvas ransomware settlement