It looks like every CSU System is on the list (California State University). Surprised this hasn't hit the front page yet.

Great. More data gone astray. Given Canvas' handling of the situation, I doubt they're going to learn much.

The timing probably isn't a coincidence. Great time to stress out students and staff alike. Hopefully it doesn't affect them too much in the end, but I imagine it will.

I remember this group did something else a while back too.

i work tech at a university that's impacted by this. while it doesn't impact me directly, many many other staff and instructors i know are heavily affected by this outage. the students are absolutely outraged, mostly because the university hasn't been providing updates as quickly as they'd like, but since the staff/admin are waiting on word from instructure -- and there hasn't been a lot from them, it just generally sucks for all of us.

this is really, really, REALLY bad. it's not great that names/emails/etc will potentially be leaked, but also private messages between students and instructors. and since many of the campus systems rely on canvas integration, things have pretty much ground to a halt a week before finals.

after they were breached on the 1st of this month, instructure had an announcement yesterday that "everything is great! we're good! hackers are gone! we've rotated our keys!".

no. nothing is great. we are not good.

It is absolute chaos at my institution. This is the last day of finals and grades are due Monday morning. Most faculty are spending today, tomorrow, and through the weekend finalizing grades.

What we don't have access to includes:

* Already graded work

* Ungraded work

* overall adn assignment grades

* lists of students and student emails from the course

* messages from students that are often sent through gradescope

Just...complete implosion.

Eek I bet there are a few people at Instructure who won't be getting much sleep tonight!

No paywall : https://archive.ph/fLR71

Nothing to see here folks. Just another predicable data breach from allowing companies to do whatever the hell they want with sensitive personal information.

This will keep happening, more and more, and never stop, until we create a software building code and legally require it for all online businesses.

Universities, Parents: ya'll actually have the political and economic power to get a software building code passed. This incident isn't the last.

going after systems that affect students is beyond bad taste

You learn all the technical details only to harm people like that instead of making a modest and honest living.

Shame on your existence basically.