Edtech company Instructure says names, email addresses, ID numbers, and messages were stolen in a cyberattack.