<![CDATA[Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages.]]>Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages.

But you might not find the page because right now it has a "noindex" tag in the page's HTML code, which prevents it from being listed in search results.

The page is here, FYI: https://www.instructure.com/incident_update

]]>https://board.circlewithadot.net/topic/5474af71-8370-403d-b88d-024c5b6132f3/edtech-giant-instructure-was-hacked-twice-and-finally-put-up-a-security-incident-page-after-the-mass-defacement-of-canvas-school-login-pages.RSS for NodeFri, 15 May 2026 02:31:39 GMTSat, 09 May 2026 22:16:58 GMT60<![CDATA[Reply to Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages. on Sun, 10 May 2026 00:12:00 GMT]]>@zackwhittaker Have already had schools reaching out to say, "But no financial information was accessed," when, at least where I am, we've never entered any financial information into Canvas.

I'm more concerned about all the other back-end personal data loaded into Canvas from elsewhere that can't be changed with a phonecall to a bank.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/BenjaminNelan/statuses/116547382187974016https://board.circlewithadot.net/post/https://mastodon.social/users/BenjaminNelan/statuses/116547382187974016Sun, 10 May 2026 00:12:00 GMT<![CDATA[Reply to Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages. on Sun, 10 May 2026 00:07:12 GMT]]>@zackwhittaker oh FFS - thanks for flagging the noindex

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/douglevin/statuses/116547363320631224https://board.circlewithadot.net/post/https://infosec.exchange/users/douglevin/statuses/116547363320631224Sun, 10 May 2026 00:07:12 GMT<![CDATA[Reply to Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages. on Sat, 09 May 2026 23:48:03 GMT]]>@zackwhittaker
I like the misleading FAQ about data being taken and the answer narrows the scope drastically in hopes you didn't catch what they did

]]>https://board.circlewithadot.net/post/https://techhub.social/users/bobkmertz/statuses/116547288027395304https://board.circlewithadot.net/post/https://techhub.social/users/bobkmertz/statuses/116547288027395304Sat, 09 May 2026 23:48:03 GMT<![CDATA[Reply to Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages. on Sat, 09 May 2026 23:21:37 GMT]]>@zackwhittaker and wildly, this will probably be the only time a meta tag actually works 😂

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/CarlWatkins/statuses/116547184069412400https://board.circlewithadot.net/post/https://mastodon.social/users/CarlWatkins/statuses/116547184069412400Sat, 09 May 2026 23:21:37 GMT<![CDATA[Reply to Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages. on Sat, 09 May 2026 22:54:13 GMT]]>@zackwhittaker

Did they mean to tag it no content?

That was a lot of meaningless corporate BS

]]>https://board.circlewithadot.net/post/https://timeloop.cafe/users/alienghic/statuses/116547076325172587https://board.circlewithadot.net/post/https://timeloop.cafe/users/alienghic/statuses/116547076325172587Sat, 09 May 2026 22:54:13 GMT<![CDATA[Reply to Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages. on Sat, 09 May 2026 22:32:07 GMT]]>@zackwhittaker They were hacked 3 times. Once in Sept 2025, Once around April 30th, and again May 7th.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/grey/statuses/116546989396166845https://board.circlewithadot.net/post/https://infosec.exchange/users/grey/statuses/116546989396166845Sat, 09 May 2026 22:32:07 GMT<![CDATA[Reply to Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages. on Sat, 09 May 2026 22:31:24 GMT]]>@zackwhittaker smells fishy....

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/InfosecFemthing/statuses/116546986620938337https://board.circlewithadot.net/post/https://infosec.exchange/users/InfosecFemthing/statuses/116546986620938337Sat, 09 May 2026 22:31:24 GMT<![CDATA[Reply to Edtech giant Instructure was hacked (twice) — and finally put up a security incident page after the mass-defacement of Canvas school login pages. on Sat, 09 May 2026 22:21:46 GMT]]>@zackwhittaker My favorite part is that several school districts migrated from PowerSchool to Canvas because the former* was hacked.

]]>https://board.circlewithadot.net/post/https://triangletoot.party/users/thomrstrom/statuses/116546948728601879https://board.circlewithadot.net/post/https://triangletoot.party/users/thomrstrom/statuses/116546948728601879Sat, 09 May 2026 22:21:46 GMT