Instructure, the company behind the Canvas learning platform, disclosed a cybersecurity incident perpetrated by a criminal threat actor. The company is actively investigating the incident's impact, with some services like Canvas Data 2 and Canvas Beta experiencing maintenance and potential issues for customers relying on API keys.
Initial Access
Criminal Actor Breaches Network
confirmed
A criminal threat actor gained unauthorized access to Instructure's systems, initiating a cybersecurity incident. The specific method of initial access is currently under investigation.
Defender cut points
Implement robust multi-factor authentication for all external access pointsRegularly audit access logs for anomalous activity
