r/canvas

Can shinyhunters reply to 2 of my classmates on the weekly discussion post please🙏 ❤️‍🩹

Just received this via email. Am a Canvas admin for a college.

>To our Instructure Community,

>We know that for many of our customers, concerns about the potential publication of data related to this incident remain top of mind. We want to acknowledge those concerns directly – we understand how unsettling situations like this can be, and protecting our community is also a top priority for us.

>With that responsibility in mind, we reached an agreement with the unauthorized actor involved in this incident. As part of that agreement, the data was returned to us, we received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any copies of that data were deleted. Further, we have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise. While there is never complete certainty when dealing with cyber criminals, we believe it was important to take every step within our control to give our customers additional peace of mind, to the extent possible.

>We are sharing this update in the continued interest of transparency and so that our customers know that we have addressed this element of the incident directly. To reiterate, the agreement covered all of our customers, and there is no need for individual customers to attempt to engage with the unauthorized actor.

>We appreciate your patience and trust as we continue to respond to this incident thoughtfully and comprehensively. We remain committed to providing meaningful updates as our work progresses.

>Regards,

>Steve Daly, CEO, Instructure

https://preview.redd.it/824fcq308l0h1.jpg?width=1332&format=pjpg&auto=webp&s=facab3645140b9b1d6c64fea128782fd5b09b7cb

It has been brought up that Canvas has suffered an attack today, with a ransomware notice being put up before Canvas was taken down for maintenance. This has already been acknowledged by Instructure, and updates on Canvas and when it will be back up can be found on the Instructure Status page.

At the time I am writing this, there has been no statement from Instructure about the attack other than its acknowledgment, and no updates on how the attack happened or when Canvas will recover.

except, unfortunately prof, i have 3 jobs and only can do my homework on thursdays + friday mornings. and now while the lecture and additional material is locked behind canvas (and the prof dgaf ab emailing THAT to us), our assignment submissions are still being accepted through email. except oh wait. the assignment instruction pdf is also trapped in canvas w the prof not emailing that to us.

fml

Nobody likes you. You are not the hero here. You do not deserve any money. Your group name is also cringe.

UPDATE: I got in contact with the department chair, and they said I won't be penalized :)

Hello! today is the last day of my semester.

I was unable to complete a major exam (\~45% of course grade) due to LockDown Browser and Canvas access issues during a campus system disruption on Thursday and Friday.

I contacted my professor during the issue and followed up once access was restored.

My professor responded today, (Monday) due to end-of-term, no further extensions can be granted.

I’m looking for guidance on what the appropriate next steps are in this situation (department contact, appeal process, or other options).

Any advice is appreciated.

Edit: For the people misunderstanding/ want more details:

The day I was scheduled to take the exam, which was also its due date, coincided with the Canvas breach.

As a result, my instructor extended the deadline to the following day. However, I continued to experience technical issues and was unable to log in and access the exam.

I emailed my instructor about the issue that same day and also contacted IT support immediately (which they fixed). I did not receive a response from my instructor until today, which is the last day of the semester.

At this point, I still have not been able to access the exam, as it requires reopening on her end

I know most people have heard about the hack that happened with canvas. So far my school got it back but when I was taking a final just now I noticed that every few minutes it would play the “John Cena” meme with the music and everything and it would take over the whole page so I couldn’t do anything until it went away. Was wondering if anyone else experienced this cause it’s happened 4 times now.

Or if canvas even knows about it at all?? I haven’t seen anyone say anything about it yet so I’m not sure..

https://preview.redd.it/x0ysybqzurzg1.png?width=792&format=png&auto=webp&s=4d1a258161a32bde4a4eba6f986e2c6f0e074825

It's so mean to target colleges and college support systems. The employees are already low paid, over-worked, and just trying to help people. The students are working towards bettering their lives which, in turn, betters the world. All these hackers are doing is makaing the world harder and worse for a LOT of people. As if anyone needs that right now.

As a college staff person working in data systems, I have spent the last 12 years battling hackers. Most of it is for financial aid money, other times to sell information, but some of it is just to be mean. It's not like colleges have money to spare. Our budgets have been sliced. My school gets less than 1/3 of the state budget that it got 10 years ago. We're already bone dry.

Why not hack private corporations with actual money? Morons. This one hack will take up the next 2 years of my worklife. As if I didn't already have 2 full time jobs.

A couple of years ago they targeted my school and were able to destroy multiple systems - not our main student information system but it was close. It took years for us to recover. And this was right when COVID started.

And, when I earned my MS degree they targeted my school the week of finals and prevented me from getting my final grades and degree for 6 extra months. It costs me 6 months of a raise at work. Imagine how much damage they are doing in total.

In fact, right now, instead of being downstairs with my family I am manually reviewing college admission applications and determining individually which ones I think are fake based on multiple criteria including pattern recognition, logic, knowledge of my geographical area, etc. The fake ones get flagged and have to come into a campus physically to verify themselves in person. We used to allow Zoom calls, but now they can impersonate people using AI.

I could go on all day. This has become my life.

Sorry if typos. I'm working.

Edit: Imagine the impact on students. They are already SO overwhelmed. The panic, not knowing if they will pass, graduate, etc. While their schools are trying to figure out what to do and how to communicate (without getting into legal trouble). It's a delicate balance.

HEY STUDENTS - we are doing everything we can to make things right - please believe in your school staff - we care A LOT!!

😭😭😭