A cyberattack on Canvas LMS disrupted thousands of US colleges, with hackers claiming they stole data from 250 million students and staff.