Resolved
Instructure, the creators of Canvas, announced they have closed last week’s security incident, which caused disruption to Canvas services and a limited user data breach. Instructure has received confirmation of data destruction (shred logs) after reaching an agreement with the cybercriminals to ensure the stolen data will not be released. Full details from Instructure.
Information Technology Service (ITS) has also concluded in its own investigation and confirmed:
-
No George Mason accounts were compromised; therefore, passwords are not required to be reset
-
No related applications were affected
-
No related ransomware threat currently exists
ITS continues to carefully monitor all systems. As always, remain vigilant to all suspicious activity and review security best practices.
Canvas is fully operational and safe for use. Canvas was unavailable on May 7 from 4:30 pm – 11pm ET. From 11 pm through 8:00 am ET on May 8, login was discouraged as ITS performed checks and system validations. Full details are available on the campus status page.
Initial Alert
Canvas is currently unavailable for all users. Instructure, our Canvas hosting partner, is aware of the issue and working to resolve as soon as possible.