Forest Global Training Partners

Cyber Risks · Krebs on Security

Canvas Breach Disrupts Schools & Colleges Nationwide

Summary: A data extortion attack on the education platform Canvas disrupted classes and coursework at school districts and universities across the United States, after the cybercrime group ShinyHunters defaced the login page with a ransom demand threatening to leak data from 275 million students and faculty at nearly 9,000 institutions. Canvas parent firm Instructure disabled the platform in response, after acknowledging a breach earlier in the week that it said exposed names, email addresses, student ID numbers and user messages, and later stating it paid the extortionists in exchange for data destruction.

Key Takeaway: ShinyHunters' demand told affected schools to negotiate their own ransom payments regardless of whether Instructure paid, and a source close to the investigation said a number of universities had already approached the group about paying - while Instructure's own CISO had declared the incident contained on May 2, five days before the login page was defaced.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related