While the attack was nationwide, only some places were affected by the Canvas shutdown that happened during the cyber attack on May 7.
As Anthonie Robinson, a EHS Sophomore complains, “I’m [frustrated] because I was trying to turn in an assignment, but it wouldn’t let me. I went to Canvas, I tried to get it to work, but it wouldn’t load.” Robinson now attributes this to Thursday’s attack.
The group who is taking credit for the breach call themselves “Shiny Hunters” and are continuing to hold the data for ransom–with a deadline of May 12. Additionally, they threaten to leak the data of millions of users on this same date.
Canvas claims the only data that was affected are full names, email addresses, student/user ID numbers, and private messages sent within the platform. Ethan Burkhead, a EHS Sophomore says, “Not going to lie…they will be giving out anything.” Personal information is, of course, a primary concern. Canvas insists data–such as passwords, SSNs (Social Security Numbers), DOBs (Date of Birth), and financial information–have not been affected.
The concerns of the information being leaked are that those affected by it will be at risk for phishing attacks and scams due to the exposed information. While the information does contain personal details, no serious data–SSNs or financial information–was breached. Consequently, the impact would be minor for affected people, compared to the level of information that could have been exposed.
While Canvas has fixed the exploit the hackers have already downloaded, all of the data information is at the mercy of the Cybercriminals. Although the data is still unsecure and the deadline grows closer, Canvas is back to normal operations–allowing students to continue using their vital resources for education.
Lastly, due to Canvas having a breach of personal information, they are currently under investigation for negligence. And, if Canvas is determined to be guilty, those who are affected by the Canvas hack can join a class action lawsuit to receive compensation for the data breach.
