<![CDATA[Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly.]]>

Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. Based on the information they have shared, the data involved was returned to Instructure. They also received assurances that the data will not be further shared and confirmation that any copies were deleted. Instructure has stated that no schools or districts will be extorted as a result of this incident.

Link Preview Image
]]>https://board.circlewithadot.net/topic/27e5653d-0120-4bf4-9c23-9f0cf67941b6/instructure-the-company-that-operates-canvas-has-confirmed-that-it-addressed-the-incident-directly.RSS for NodeFri, 15 May 2026 04:51:10 GMTTue, 12 May 2026 00:09:17 GMT60<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 16:23:34 GMT]]>@tati @cR0w
I think of all the patches that I've missed
But then the ransom was never quite like this!

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/FritzAdalis/statuses/116562527147701923https://board.circlewithadot.net/post/https://infosec.exchange/users/FritzAdalis/statuses/116562527147701923Tue, 12 May 2026 16:23:34 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 16:17:52 GMT]]>@cR0w Gotta feel the seal on the certificate of deletion. If you can't detect the embossed edge around it, the seal is a forgery. That means the adversary did not pinky swear before the registrar of deleted hacks. Which only costs, like, $18. If they didn't spring for that, they definitely must be lying.

]]>https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/log/statuses/116562504739724339https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/log/statuses/116562504739724339Tue, 12 May 2026 16:17:52 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 14:53:52 GMT]]>@tati @cR0w

"Our offering was leveraged by an unauthorized actor in their activity."

I don't think even CNN could come out with a voice that passive. Dude had to completely mangle the semantic structure of that sentence just to thread the needle between the obvious truth, and a lie blatant enough to be visible from the moon.

Hey Steve, go apologise to your high school English teacher.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/McCovican/statuses/116562174454135363https://board.circlewithadot.net/post/https://infosec.exchange/users/McCovican/statuses/116562174454135363Tue, 12 May 2026 14:53:52 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 12:51:41 GMT]]>@cR0w The amount of comfort this provides me is *immeasurable.

* It's zero. The number is zero.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116093572746253175/statuses/116561693995544003https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116093572746253175/statuses/116561693995544003Tue, 12 May 2026 12:51:41 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 12:37:51 GMT]]>@nyanbinary @cR0w I was discussing the Instructure hack with a friend who works for a school district and he stated that almost exactly. I told him that yes, that makes sense if we believe they care about "organization reputation" in the same economic incentive driven context as a regular business. Which I highly doubt. But let's assume they do follow this logic.

What keeps them from selling a copy quietly to another criminal and then THAT criminal actions the data somewhere else without directly saying "Instructure". TAs double dip and keep their "reputation" intact.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rossmadness/statuses/116561639598903872https://board.circlewithadot.net/post/https://infosec.exchange/users/rossmadness/statuses/116561639598903872Tue, 12 May 2026 12:37:51 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 12:33:02 GMT]]>@phil Isn't that the whole point of becoming a publicly traded company in America? It sure seems that way.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116561620646988388https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116561620646988388Tue, 12 May 2026 12:33:02 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 12:31:07 GMT]]>@tati @cR0w Oh that's nice to know! So I suppose Paid-for-Teachers can be leveraged instead now?

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/pa/statuses/116561613113334833https://board.circlewithadot.net/post/https://hachyderm.io/users/pa/statuses/116561613113334833Tue, 12 May 2026 12:31:07 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 12:24:13 GMT]]>@cR0w@infosec.exchange Sad. There is a definite deficit of accountability.

]]>https://board.circlewithadot.net/post/https://fed.bajsicki.com/notes/am662peqs5https://board.circlewithadot.net/post/https://fed.bajsicki.com/notes/am662peqs5Tue, 12 May 2026 12:24:13 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 12:23:23 GMT]]>@phil IDK how it works either but I highly doubt they will be held responsible.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116561582688718672https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116561582688718672Tue, 12 May 2026 12:23:23 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 09:33:12 GMT]]>@rossmadness @cR0w It turns out that seeing a way to pretend to solve your problem by spending other people's money and letting other people bear the ongoing risk just gives you a warm feeling of childish trust.

Plus, when you are lawful evil seeing chaotic evil probably just reminds you of your carefree younger days; when you would have been frolicking on the intertubes not being a saashole who has to do earnings calls.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/116560913498089263https://board.circlewithadot.net/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/116560913498089263Tue, 12 May 2026 09:33:12 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 09:12:39 GMT]]>@r0k @cR0w I doubt it. They probably just said they did. They just shift blame if anything or anyone contradicts their narrative.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/remywhisker/statuses/116560832754206232https://board.circlewithadot.net/post/https://mastodon.social/users/remywhisker/statuses/116560832754206232Tue, 12 May 2026 09:12:39 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 06:13:24 GMT]]>@cR0w the terminator : 'i'll be back'

actually, wait, i'm still here

(brain: s/Free-for-T/hot for t/g)

Link Preview Image
]]>https://board.circlewithadot.net/post/https://eldritch.cafe/users/tati/statuses/116560127890377861https://board.circlewithadot.net/post/https://eldritch.cafe/users/tati/statuses/116560127890377861Tue, 12 May 2026 06:13:24 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 05:45:22 GMT]]>@rossmadness @cR0w but but but... their business relies on being trustworthy! They need to, otherwise the industry suffers! And no one would ever act against their industries interest! All the cybertalkingheads told me!!!

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/nyanbinary/statuses/116560017675431128https://board.circlewithadot.net/post/https://infosec.exchange/users/nyanbinary/statuses/116560017675431128Tue, 12 May 2026 05:45:22 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 05:15:45 GMT]]>@rossmadness @cR0w hold onto that receipt, it's a deductible business expense

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/rotopenguin/statuses/116559901183668857https://board.circlewithadot.net/post/https://mastodon.social/users/rotopenguin/statuses/116559901183668857Tue, 12 May 2026 05:15:45 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 04:52:41 GMT]]>@cR0w@infosec.exchange So... Instructure will be on the hook if it does happen? I'm not sure how exactly this works on the legal side.

]]>https://board.circlewithadot.net/post/https://fed.bajsicki.com/notes/am5py0ynz3https://board.circlewithadot.net/post/https://fed.bajsicki.com/notes/am5py0ynz3Tue, 12 May 2026 04:52:41 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 02:28:26 GMT]]>@rossmadness @cR0w it's never not amusing whenever i read about a big organisations suddenly becoming naive when dealing with morally bankrupt people.

As though as they somehow managed to get to become a multi-million company by just a bunch of "trust us bro"

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/pH_0x05/statuses/116559243287499222https://board.circlewithadot.net/post/https://infosec.exchange/users/pH_0x05/statuses/116559243287499222Tue, 12 May 2026 02:28:26 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 02:22:21 GMT]]>@r0k @pa giggles in LockBit

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116559219337078499https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116559219337078499Tue, 12 May 2026 02:22:21 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 02:20:24 GMT]]>@pa @cR0w those honorable criminals, always keeping their word... so adorable

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/r0k/statuses/116559211670434881https://board.circlewithadot.net/post/https://mastodon.social/users/r0k/statuses/116559211670434881Tue, 12 May 2026 02:20:24 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 02:19:33 GMT]]>@cR0w I'll never understand this logic. "How do you know the morally bankrupt cybercriminals actually got rid of your data?"

"They gave us a receipt."

Yeah...sure...

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rossmadness/statuses/116559208321047112https://board.circlewithadot.net/post/https://infosec.exchange/users/rossmadness/statuses/116559208321047112Tue, 12 May 2026 02:19:33 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 01:44:05 GMT]]>@r0k Looks like it! Or maybe... they sent a really nice bouquet of flowers and it convinced SH to "assure" Canvas "the data will not be further shared and confirmation that any copies were deleted...?" 🤣 🤣 🤣 🎣
@cR0w

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/pa/statuses/116559068919895537https://board.circlewithadot.net/post/https://hachyderm.io/users/pa/statuses/116559068919895537Tue, 12 May 2026 01:44:05 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 00:22:58 GMT]]>@h2onolan you think people would do that dot png

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116558749902482951https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116558749902482951Tue, 12 May 2026 00:22:58 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 00:21:41 GMT]]>@cR0w “when we said criminal earlier, that was a regrettable mistake. What we meant was partner. A trustworty professional partner who knows where my kids go to school and where the nursing home my mom lives is located”

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/h2onolan/statuses/116558744902339282https://board.circlewithadot.net/post/https://infosec.exchange/users/h2onolan/statuses/116558744902339282Tue, 12 May 2026 00:21:41 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 00:15:37 GMT]]>@h2onolan Imagine the mindset that's satisfied with that assurance. What an enjoyable way to live as an individual.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116558721015807117https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116558721015807117Tue, 12 May 2026 00:15:37 GMT<![CDATA[Reply to Instructure, the company that operates Canvas, has confirmed that it addressed the incident directly. on Tue, 12 May 2026 00:14:25 GMT]]>@cR0w oh ffs... they paid a ransom?

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/r0k/statuses/116558716317238308https://board.circlewithadot.net/post/https://mastodon.social/users/r0k/statuses/116558716317238308Tue, 12 May 2026 00:14:25 GMT