A major edtech company is locked in an ongoing struggle to reclaim control of its systems from hackers, with the personal data of hundreds of millions of users potentially exposed or at risk of exfiltration.