Instructure Reaches Agreement with Hackers Over Stolen Canvas Data - PRESS AI WORLD
PRESSAI
Recent Posts
side-post-image
side-post-image
Economy

Instructure Reaches Agreement with Hackers Over Stolen Canvas Data

share-iconPublished: Tuesday, May 12 share-iconUpdated: Tuesday, May 12 comment-icon1 hour ago
Instructure Reaches Agreement with Hackers Over Stolen Canvas Data

Credited from: BBC

  • Instructure negotiated with hackers to delete stolen data from the Canvas educational platform.
  • The incident affected approximately 9,000 institutions globally during final exams.
  • ShinyHunters, the hacking group, threatened to release 3.5 terabytes of data if a ransom was not paid.
  • Despite the agreement, Instructure acknowledged potential risks and uncertainty regarding complete data erasure.
  • The breach did not compromise passwords or financial data, but student IDs and emails were involved.

The parent company of Canvas, Instructure, confirmed that it struck a deal with hackers to delete stolen data following a significant cyberattack that created chaos for students worldwide, particularly during finals. The hacking group, known as ShinyHunters, claimed responsibility for the breach, which affected nearly 9,000 schools and involved threats to leak sensitive data unless a ransom was paid, originally set for May 6. Instructure temporarily took the Canvas system offline as it investigated the breach, locking out both students and faculty during this period, according to BBC, CBS News, and LA Times.

The specifics of the agreement reached between Instructure and the hackers remain undisclosed, including whether any payment was exchanged. As part of this deal, Instructure stated that the stolen data was returned and "digital confirmation" was received signifying the destruction of any remaining copies, known as "shred logs." However, the company expressed that there is no absolute assurance that the data was permanently erased, underlining that caution was taken due to potential risks of the data's publication, as noted by CBS News and LA Times.

Instructure clarified that the data breach primarily included student identification numbers, email addresses, names, and messages on the Canvas platform, while confirming that no passwords, birth dates, government IDs, or financial information had been compromised. The hacking incident induced panic among students and faculty, as they were abruptly locked out of the platform essential for managing grades and coursework. Canvas serves as a critical tool for submission of final projects and conducting exams, further heightening the urgency of the situation, according to BBC, CBS News, and LA Times.

SHARE THIS ARTICLE:

nav-post-picture
nav-post-picture