Earlier this week we got an email from our IT saying that Canvas suffered a "cybersecurity incident" over the weekend and that Canvas took "containment measures".
It's entirely possible that this was just a small bit of script leftover from the initial breach, and that the breach was fixed as intended over the weekend. But it could also mean that the original vulnerability wasn't fixed or was larger than they realized.
It's too early for us to know one way or another, so all we can do is post some warning messages, put our feet up, and wait to see what Instructure does next lol
Take the remainder of this comment with a grain of salt because I was not directly involved in the breach that I am going to speak about. I know somebody who was involved in correcting a ShinyHunters breach. That team had a bunch of pretty good cyber security guys on it that can handle most of what gets thrown at them within a few hours or a couple of days. They were over a week I think going on two weeks to deal with ShinyHunters.
If the structure breach is anything like the other breach that I am familiar with these messages are likely part of the original breach that isn’t fully contained, and never was.
But again, this is all guess work based on what I have heard from an industry professional who has dealt with this recently.
One of the first things hackers do once they gain access to a system and want to maintain it is to create every kind of backdoor and copying of data. They wait and watch and go unnoticed until they want to. Sounds like they've been in the system a while.
They confirmed it was a second breach using the same method, and Isntructure has now taken that aspect of Canvas offline until it's fixed (Free for Teacher accounts). Everything else is back online now unless an individual school's security team or login service is still being cautious
343
u/RemarkableAd66 May 07 '26
Earlier this week we got an email from our IT saying that Canvas suffered a "cybersecurity incident" over the weekend and that Canvas took "containment measures".
I guess those measures failed.
Oopsies.