Everything you need to know about canvas hack aftermath owner instructure reaches.
[ad_1]Students are finally getting some good news during finals season: The personal data stolen during the Canvas hack has been secured, according to service owner Instructure.
The company confirmed that it reached an agreement with the hacker group ShinyHunters to destroy illicit copies of user data and prevent extortion of Canvas customers. It remains unclear whether this agreement included ransom payment for the hackers. The stolen data included “information like usernames, email addresses, course names, enrollment information and messages.”
Instructure said “there is never complete certainty when dealing with cybercriminals,” but the company states that it received digital confirmation that the stolen data had been deleted by the hackers, in the form of shred logs.
Instructure cautioned affected Canvas users against individual attempts to contact or bargain with the ShinyHunters group, saying its agreement “covers all impacted Instructure customers.”
The hacker group first infiltrated Canvas systems on April 29, using a security flaw tied to Free-For-Teacher accounts. This allowed ShinyHunters to scrape personal information tied to students and educators.
While we don’t know exactly how many institutions were affected, the hackers claimed they had targeted more than 9,000 universities and public school districts. Canvas is used in K-12 schools, so it’s likely that the breach exposed sensitive information of underage students.
The situation escalated when the hackers cracked Instructure’s security for a second time on May 7, leaving a message exposing their illicit activity to anyone attempting to sign in to Canvas. Instructure promptly moved Canvas into maintenance mode, during which students were unable to access the service.
If the ShinyHunters name sounds familiar, it’s because it’s a well-established collective of ransomware hackers. ShinyHunters is the same team that breached Anodot and absconded with some of Rockstar Games’ business data in April.
Its previous targets largely consist of large tech companies like Microsoft, Cisco and AT&T, but the hackers have also ransomed information from insurance companies, credit unions and other institutions that handle sensitive data.
Canvas is currently operational, although the Free-For-Teacher accounts have been temporarily disabled as Instructure continues to investigate the exploit used to breach its systems.
Instructure asked customers to continue monitoring their accounts, though its external forensic partner has “found no evidence that the threat actor currently has access to the platform.”
Instructure is organizing a webinar for its customers in order to “detail information about the cyberattack and [Instructure’s] activities to harden the system.” The webinar is currently slated for May 13 across multiple time zones.
An Instructure representative did not immediately respond to a request for further comment.
[ad_2]
Source link
More on canvas hack aftermath owner instructure reaches
Stay tuned for updates on canvas hack aftermath owner instructure reaches as the story develops. Related: Canvas Hack Aftermath: Congress Wants Instructure to Answer Questions.
Canvas hack aftermath owner instructure reaches: Key Details Explained
Canvas Hack Aftermath: Owner Instructure Reaches Deal With Hacker Group — let’s break down what actually matters here. This one stands out because it touches the things buyers care about most: performance, features, and value for money. If you’re comparing options right now, it’s worth keeping on your shortlist.
Looking at the bigger picture, this fits into a wider trend where brands compete harder with every release cycle. Expect more details to surface as things develop, including confirmed specifications and pricing from official sources.
Should You Keep Following This?
If you follow mobile tech closely, the answer is yes. Developments like this could influence your next purchase decision, so it’s worth tracking. Bookmark this page — we’ll keep the coverage fresh as the story evolves.
Frequently Asked Questions
Instructure confirmed it reached an agreement with the hacker group ShinyHunters to destroy illicit copies of user data and prevent extortion of Canvas customers.
It remains unclear whether the agreement included a ransom payment; Instructure says it received digital confirmation of deletion in the form of shred logs.
The stolen data included usernames, email addresses, course names, enrollment information and messages.
ShinyHunters first infiltrated Canvas systems on April 29 using a security flaw tied to Free-For-Teacher accounts, and claimed to have targeted more than 9,000 universities and public school districts.
