<![CDATA[New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide]]>New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide

"An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group defaced the service’s login page with a ransom demand that threatened to leak data from 275 million students and faculty across nearly 9,000 educational institutions."

"Canvas parent firm Instructure [NYSE:INST] responded to today's defacement attacks by disabling the platform, which is used by thousands of schools, universities and businesses to manage coursework and assignments, and to communicate with students."

Lots more here:

Link Preview Image
Canvas Breach Disrupts Schools & Colleges Nationwide – Krebs on Security

favicon

(krebsonsecurity.com)

Link Preview Image
]]>https://board.circlewithadot.net/topic/5335e8f9-3f45-4417-b93d-a6de1816df5a/new-from-me-canvas-breach-disrupts-schools-and-colleges-nationwideRSS for NodeFri, 15 May 2026 01:54:25 GMTFri, 08 May 2026 03:07:06 GMT60<![CDATA[Reply to New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide on Fri, 08 May 2026 03:55:43 GMT]]>@Beachbum @briankrebs AWS bucket “issues” have been reported for this latest breach.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/T2R/statuses/116536937281975004https://board.circlewithadot.net/post/https://infosec.exchange/users/T2R/statuses/116536937281975004Fri, 08 May 2026 03:55:43 GMT<![CDATA[Reply to New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide on Fri, 08 May 2026 03:43:41 GMT]]>@briankrebs

It'll be interesting to see if this ends up being a factor in the breaches:

"Instructure, the creators of Canvas Learning Management System, and OpenAI, the artificial intelligence research organization and developer of ChatGPT, have joined forces to present a compelling solution. Their innovative partnership shows how AI can become a normal, helpful part of everyday educational experiences, greatly improving teaching and learning processes."

Link Preview Image
Instructure And OpenAI Harness The Power Of AI To Transform Learning

Instructure and OpenAI partner to embed powerful AI tools within Canvas LMS, transforming learning by enabling dynamic assignments, rich feedback, and deeper insights.

favicon

Forbes (www.forbes.com)

]]>https://board.circlewithadot.net/post/https://mastodon.online/users/zl2tod/statuses/116536889928772952https://board.circlewithadot.net/post/https://mastodon.online/users/zl2tod/statuses/116536889928772952Fri, 08 May 2026 03:43:41 GMT<![CDATA[Reply to New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide on Fri, 08 May 2026 03:37:44 GMT]]>@briankrebs Iran?

]]>https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/Beachbum/statuses/116536866516981754https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/Beachbum/statuses/116536866516981754Fri, 08 May 2026 03:37:44 GMT<![CDATA[Reply to New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide on Fri, 08 May 2026 03:37:04 GMT]]>@briankrebs

s/nationwide/worldwide/

Link Preview Image
New Zealand students' details caught up in massive global university hack

Names, email addresses, ID numbers and messages between users could all have been stolen, while students can't submit work.

favicon

RNZ (www.rnz.co.nz)

]]>https://board.circlewithadot.net/post/https://mastodon.online/users/zl2tod/statuses/116536863941289670https://board.circlewithadot.net/post/https://mastodon.online/users/zl2tod/statuses/116536863941289670Fri, 08 May 2026 03:37:04 GMT<![CDATA[Reply to New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide on Fri, 08 May 2026 03:32:11 GMT]]>@briankrebs @jtk Public institutions have since ridiculously strict rules about paying cybersecurity ransoms, no?

]]>https://board.circlewithadot.net/post/https://beige.party/users/mayintoronto/statuses/116536844691834653https://board.circlewithadot.net/post/https://beige.party/users/mayintoronto/statuses/116536844691834653Fri, 08 May 2026 03:32:11 GMT<![CDATA[Reply to New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide on Fri, 08 May 2026 03:30:03 GMT]]>@briankrebs @jtk Not surprised but also not ideal. Everyone's trying to put the fire within their own area of control. Are are any further details on how they managed to do it ? The fact that they were hacked last year and again this time doesn't bode well.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/deepfryed/statuses/116536836328417984https://board.circlewithadot.net/post/https://fosstodon.org/users/deepfryed/statuses/116536836328417984Fri, 08 May 2026 03:30:03 GMT<![CDATA[Reply to New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide on Fri, 08 May 2026 03:18:45 GMT]]>@jtk I am shocked. From the story

A source close to the investigation who was not authorized to speak to the press told KrebsOnSecurity that a number of universities have already approached the cybercrime group about paying. The same source also pointed out that the ShinyHunters data leak blog no longer lists Instructure among its current extortion victims, and that the samples of data stolen from Canvas customers were removed as well. Data extortion groups like ShinyHunters will typically only remove victims from their leak sites after receiving an extortion payment or after a victim agrees to negotiate.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/briankrebs/statuses/116536791884293264https://board.circlewithadot.net/post/https://infosec.exchange/users/briankrebs/statuses/116536791884293264Fri, 08 May 2026 03:18:45 GMT<![CDATA[Reply to New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide on Fri, 08 May 2026 03:17:20 GMT]]>@briankrebs Reports in the last hour that logins were working again.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/jtk/statuses/116536786337620100https://board.circlewithadot.net/post/https://infosec.exchange/users/jtk/statuses/116536786337620100Fri, 08 May 2026 03:17:20 GMT