Instructure Returns Canvas Data After Hackers' Agreement, Schools Told
Instructure said data stolen in the Canvas ransomware attack was returned after an agreement with the hackers, ending the lockout that affected schools using the platform. The company also said it received digital confirmation that the data was destroyed.
The update matters for teachers and students who were delayed during finals and cut off from Canvas at thousands of universities. Instructure said it had been informed that no customers will be extorted as a result of the incident.
Jake Braun on the breach
Jake Braun, the former White House deputy national cyber director and head of the University of Chicago's Cyber Policy Initiative, said artificial intelligence was used in the attack. In an interview, he said, "This ransomware problem is getting worse, not better. And with the use of AI almost, like, commoditizing hacking, it becomes very disconcerting," and warned that personal information may still be at risk.
Braun said he had not opened one email since the attack because he did not feel he could trust what emails were real or not. He advised people to call their school IT department to confirm whether an email is legitimate, turn on multifactor authentication if possible, and go directly to the Canvas website to log in.
Canvas schools and stolen data
The attack hit thousands of universities that use Canvas, turning a routine education platform into a point of disruption during finals. Braun said, "We find out about the big ones like this, but I know in my time at the White House, the big story for us was all the attacks that weren't being reported, where folks just pay the ransom and move on," adding, "We still think we're only hearing about a fraction of what's actually out there."
He also said, "One of the fastest growing groups in the world that's getting scammed online is youth, and so, I do wonder what these criminal groups will do with all this data to potentially swindle young people who are in college," linking the stolen information to students who may still need to watch for suspicious messages. Braun said, "We're more vulnerable than ever particularly with how AI is making this so much easier for bad guys," and added that law enforcement is not resourced to go after ransomware groups.
Instructure update
Instructure said it had been informed that no customers will be extorted as a result of this incident. The company said the stolen data was returned and that it received digital confirmation of destruction, closing the immediate breach response even as Braun warned personal information may still be at risk.
