Canvas Learning Portal Hacked, Exposing Student Data Worldwide

The Canvas learning management system, utilized by 9,000 institutions globally, was hacked last week, compromising sensitive data including names, email addresses, phone numbers, and messages between students and staff. The breach rendered the system inoperable for two days before it was restored. University of Auckland's Ulrich Speidel warned that the system is now more vulnerable to future attacks due to the hackers' access to its code. He expressed concerns that the hackers could return soon to exploit any security weaknesses they discovered. Instructure, the company behind Canvas, confirmed that they reached an agreement with the hackers, resulting in the return of the stolen data and confirmation that it was destroyed on the hackers' end. Speidel criticized the lack of urgency in addressing security vulnerabilities, noting that cybersecurity is often not prioritized by organizations using third-party web applications. Cybersecurity commentator Anthony Grasso emphasized the need for legislative changes to enforce stricter cybersecurity measures in organizations. The New Zealand government is considering penalties for data breaches under the Privacy Act.

Key Points: • Canvas system hacked, exposing data of 9,000 institutions worldwide. • Sensitive information including names and emails was compromised. • Experts warn of increased vulnerability to future attacks.