A cyberattack on the online learning system Canvas led to significant disruptions for students during finals week, prompting the company, Instructure, to negotiate with the hackers. The details of this deal remain undisclosed, including whether any payment was made to the attackers.
Instructure temporarily took the platform offline to investigate the breach, which reportedly compromised student ID numbers, email addresses, and messages. However, the company confirmed that sensitive information such as passwords and financial details was not affected.
As part of the agreement reached with the hackers, Instructure received assurance that the stolen data was deleted, including “shred logs” as proof. Despite this, the company acknowledged the inherent uncertainty in dealing with cyber criminals.
In response to the incident, Instructure is collaborating with expert vendors to enhance security measures and conduct a thorough analysis of the compromised data. The situation caused considerable anxiety among users, as Canvas is integral to managing coursework and communication between students and faculty.