Several universities in Ontario, including the University of Toronto, are among the many institutions affected by a cybersecurity issue involving the learning platform Canvas.
Instructure, the parent company of Canvas based in the U. S., announced a breach “by a criminal threat actor” on its website on May 1.
A follow-up post on May 2 revealed that some personal information of Canvas users, like names, email addresses, student ID numbers and messages, might have been compromised. However, there was no indication that passwords or sensitive government or financial details were accessed, according to Steve Proud, the chief information security officer for the company.
As of now, has confirmed that five schools in Ontario have experienced issues due to this breach: the University of Toronto, Western’s Ivey Business School, OCAD University, Mohawk College and Ontario Tech University. The University of Toronto, OCAD and Ontario Tech mentioned that their winter terms had ended so there was no disruption to classes.
“As far as I can tell, this is the largest educational IT hack in history,” said David Shipley, CEO of Beauceron Security. “This is an incredibly destructive attack.”
Instructure stated on Wednesday that Canvas was back to normal with no ongoing unauthorized activity and they were working with affected customers to offer support. Shipley noted it seems hackers returned on Thursday to gather more data, alter login pages and send demands for payment to schools and students.
In an email sent Friday, Infrastructure spokesperson Brian Watkins reported that they discovered changes made by the “unauthorized actor” when some students and teachers logged into Canvas. The company quickly took Canvas offline for investigation purposes.
“We have confirmed that the unauthorized actor exploited an issue related to our Free-For-Teacher accounts,” he added, noting those accounts have been temporarily disabled.
“This gives us confidence to restore access to Canvas which is now fully operational again. We regret any inconvenience or concern this may have caused.”
WATCH | Tips on how to protect yourself if you think you’ve been hacked:
How to know if you’ve been hacked – and what you can do to protect yourself
Data breaches and ransomware incidents seem increasingly common in news reports lately. However, cybersecurity experts emphasize steps you can take after a data breach occurs while also preparing for potential future events.
The Associated Press reported Thursday that Canvas went offline once more for several hours; however it remains unclear whether it was hacked again or if Instructure took it down as a precautionary measure.
Canvas serves as a platform for schools to share materials like lecture videos, notes and assignments while also distributing grades.
U of T Suspends Program Access as Safety Measure
A community update from U of T shared Thursday that their learning management software Quercus would be unavailable until further notice due to this cybersecurity incident. The university confirmed they are in communication with Instructure seeking resolution.
On Friday morning they advised stopping program access as a safety measure and suggested students refrain from trying to log in. They assured other systems at U of T weren’t compromised.
OCAD University notified its students Thursday night about disruptions within the Canvas Cloud program stemming from this security incident; they are actively monitoring developments.
The university stated they’ve “restored access to Canvas” but warned about possible phishing attempts requesting personal details or passwords,” according to OCAD’s statement released Friday.
A notice posted by Ontario Tech informed both students and staff regarding this issue; indicating cooperation with Instructure’s cybersecurity specialists ongoing monitoring efforts being made regarding their systems’ safety.
The university reassured everyone all systems remained functional but urged reporting any unusual activities directly back via their service desk channel.
An email circulated Friday from Ontario Tech’s IT department indicated potentially impacted information is limited solely towards names along with institutional emails alongside student IDs plus course-related messages exchanged within Canvas without evidence pointing towards financial credentials nor other university systems facing exposure risks during this event cycle.
“As a precautionary step we’ve recommended both students along staff remain alert against phishing emails alongside any suspicious communications while avoiding sharing personal data through unsolicited outreach channels besides notifying our IT Service Desk should anything arise out-of-norm,” stated their department officials accordingly.
“We don’t expect significant disruptions toward student studies at present time; our institution continues monitoring closely providing additional updates toward all parties involved whenever required.”
Watkins has since communicated restoring functionality back onto platforms utilized by Ontario Tech clientele effectively once again during recent engagements concerning these issues raised respectively earlier discussed here today!
Mohawk College located within Hamilton got informed earlier last week addressing same concerns alongside gaining insight following these patterns observed throughout days leading up resulting impact affecting them similar way earlier mentioned here today too! Spokesperson Sean Coffey relayed news confirming temporary unavailability occurred around midday yesterday indicating quick attention paid thereafter working diligently moving forward appropriately handle matters raised efficiently each step taken ahead onward purposefully connecting stakeholders involved accordingly ensuring accountability upheld transparently alongside clarifying concerns voiced throughout process dynamically adjusting strategies adapting accordingly meeting needs desired moving forth together collaboratively navigating challenges faced successfully steering positively amidst uncertainties encountered collectively striving stay safe secure always together united force overcoming obstacles rising challenges head-on continuing support fostering trust throughout endeavors progressing harmoniously maintaining vigilance fulfilling responsibilities assigned keeping commitment uphold integrity safeguarding wellbeing paramount importance guiding every action undertaken decisively direct proactively doing right thing always!
Two educational institutes based across British Columbia namely located comprising overall perspectives namely University Of British Columbia Simon Fraser Institution (SFU) plus Alberta institute remain engaged similarly impacted environments finding themselves navigating complexities emerged recently witnessed prevalent trends evolving landscape amid growing demands placed continuously upon resources available crafting solutions addressing concerns raised creating pathways advancing outcomes improve experience enhance quality overall across board!
Hacker Collective Claims Responsibility For Attack On Platforms Analyzing Implications With Insight Offered By Experts Concerning Risks Presented Post-Incident Overview Next Steps Required Moving Forward With Clarity Purpose Precision Ensuring Protecting Interests Preserving Confidentiality Securely Safeguarding Data Integrity Vital Critical Components Underlying Framework Supporting Structure Behind Education Systems Today Comprehensively Addressing Gaps Present Understanding Broader Context Regarding Challenges Encountered Navigating Uncharted Territories Exercising Caution Wisdom Proceeding Careful Thoughtfulness Implementation Strategies Tailored To Meet Requirements Specific Situations Disclosed Alongside Their Outcomes Eventually Resolved Appropriately Moving Ahead Together Building Bridges Strengthening Connections Fostering Trust Transparency Honesty Mutual Respect Within Communities Engaged Purpose Driven Outcomes Achieved Together!”
Source link
