system offline<\/a> while it investigated, locking out students and faculty. <\/p>\nA hacking group named ShinyHunters claimed responsibility for last week’s breach, threatening to leak data involving nearly 9,000 schools worldwide and 275 million individuals if schools did not pay a ransom by May 6. The group then extended the deadline, indicating some schools had engaged with them to negotiate.<\/p>\n
ShinyHunters also was behind a smaller breach of Infrastructure last year. A lawsuit filed last week in federal court in Utah alleged Instructure did not do enough to protect the platform used by millions of students and made itself \u201ceasy prey for cybercriminals.\u201d<\/p>\n
As part of the deal, the data was returned to Instructure. The company said Monday that it also received \u201cdigital confirmation” that the hackers destroyed any remaining copies, in the form of “shred logs.\u201d <\/p>\n
The company acknowledged that there was no way to be sure that the data was erased for good, and said it took action because of concerns about potential publication of the data. <\/p>\n
\u201cWhile there is never complete certainty when dealing with cybercriminals, we believe it was important to take every step within our control to give customers additional peace of mind, to the extent possible,\u201d Instructure said. <\/p>\n
Cybersecurity experts were skeptical it was the end of the attack. Cynthia Kaiser, a former deputy director of the FBI\u2019s Cyber Division, said the reported deal suggests that a ransom was likely paid. <\/p>\n
\u201cWhat victims must understand is that payment does not end the threat,\u201d Kaiser, now the senior vice president of the Halcyon Ransomware Research Center, said in a written statement. “Stolen data will be used against clients and users for as long as it remains profitable to do so.\u201d<\/p>\n
The data breach appeared to involve student ID numbers, email addresses, names and messages on the Canvas platform, Instructure\u2019s chief information security officer, Steve Proud, said earlier this month. The company found no evidence that passwords, dates of birth, government identification or financial information were compromised, it said. <\/p>\n
The company said it was working with “expert vendors” to do a forensic analysis, \u201cfurther harden\u201d its systems, and carry out a \u201ccomprehensive review of the data involved.\u201d<\/p>\n
The disruption caused panic last week among students and faculty members when they were locked out of a platform they rely on to manage grades and access course notes and assignments.<\/p>\n
Schools and universities use Canvas to manage nearly all aspects of instruction. The platform acts as a gradebook, a hub for digital lectures and course materials, a discussion board for classroom projects, and a messaging platform between students and instructors.<\/p>\n
Some courses also give quizzes and exams on the platform, or use it as a portal where final projects and papers are submitted on deadline.<\/p>\n
___<\/p>\n
Heather Hollingsworth contributed to this report. <\/p>\n<\/div>\n
\n
Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that […]<\/p>\n","protected":false},"author":1,"featured_media":355360,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[30849,31343,7653,31345,31341,25542,30650,8812,31344,31342,641],"class_list":["post-355357","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-chief-info-safety-officer","tag-cynthia-kaiser","tag-deputy-director","tag-fbis-cyber-division","tag-halcyon-ransomware-analysis-middle","tag-heather-hollingsworth","tag-instructure","tag-senior-vp","tag-steve-proud","tag-unauthorized-actor","tag-utah"],"_links":{"self":[{"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/posts\/355357","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/comments?post=355357"}],"version-history":[{"count":2,"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/posts\/355357\/revisions"}],"predecessor-version":[{"id":355359,"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/posts\/355357\/revisions\/355359"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/media\/355360"}],"wp:attachment":[{"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/media?parent=355357"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/categories?post=355357"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.etrafficlane.com\/60dollarmiracle\/wp-json\/wp\/v2\/tags?post=355357"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}