Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform
Summary
Instructure, the operator of the Canvas educational platform, has reportedly reached an agreement with hackers to delete data stolen during a recent cyberattack. The attack caused significant disruption for students, particularly during final exams.
IFF Assessment
FOE
This event represents a data breach and potential extortion, which is negative for defenders as it demonstrates a successful attack and compromise of sensitive data.
Defender Context
This incident highlights the ongoing threat of ransomware and data exfiltration targeting educational institutions. Defenders should focus on robust access controls, regular security awareness training for staff, and comprehensive incident response plans to mitigate the impact of such attacks.