Canvas Operator Says Hackers Accessed User Information After Cyber Incident
Summary
Infrastructure said hackers accessed names, email addresses, student IDs and messages at some institutions, disrupting customer tools during containment. ShinyHunters claimed it stole 3.6 TB from more than 9,000 schools; that claim was not confirmed.
Key points
- Infrastructure said hackers accessed user information at some educational institutions, including names, email addresses, student ID numbers and messages.
- The incident disrupted customer tools during containment, which included revoking privileged credentials and access tokens and deploying patches.
- Infrastructure said financial information, passwords and government documents were not stolen.
- ShinyHunters claimed responsibility and said it stole 3.6 TB of data affecting more than 9,000 schools; Infrastructure did not respond to questions about that claim.
- The company said the incident was contained with help from cybersecurity experts.
Article Details
- Victim Organization
- Infrastructure
- Incident Type
- Cyberattack involving unauthorized access to user information and disruption of Canvas services.
- Data Types Exposed
- Names
- Email addresses
- Student ID numbers
- Messages between users
- Affected Records
- Unknown
- Affected Data Size
- ShinyHunters claimed it stole 3.6 TB of data; Infrastructure did not confirm the claim.
- Operational Impact
- The incident disrupted operations and Canvas services. Containment measures, including revoking privileged credentials and access tokens and deploying patches, temporarily disrupted some customer tools.
- Ransom Or Extortion
- ShinyHunters claimed responsibility and claimed to have stolen data from more than 9,000 schools. No ransom demand is reported.
- Claim Status
- confirmed