Nobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data
Summary
Instructure, the company behind the Canvas learning platform, claims that a recent hack did not result in the deletion of any student data, despite the attackers claiming otherwise. The hackers, who identify as "criminals and scumbags," stated they deleted a "massive amount" of student information from Instructure's systems.
IFF Assessment
This is bad news for defenders as it highlights a successful breach where the attackers' claims about data destruction contradict the company's statements, creating uncertainty and potential impact on affected individuals.
Defender Context
This incident underscores the importance of verifying attacker claims and maintaining robust incident response capabilities to accurately assess the scope and impact of a breach. Defenders should be aware of the potential for misdirection or partial truths from threat actors following an intrusion.