We’re currently working to identify a robust list of Indicators of Compromise (IOCs) and will make those available to our customers.

https://www.instructure.com/incident_update

It worries me they've only committed to making it available to their customers and not the public.