Canvas supplier has reached an agreement with the threat actor
Instructure reports that it has reached an agreement with the criminal actors and that data stolen from Canvas has been deleted. UiT is closely monitoring the situation.
According to Instructure, the supplier of the Canvas learning platform, they have received evidence that the data has been deleted and that the group which stole data from Canvas has promised not to publish the data again.
As previously reported, the threat actor has been blocked from Canvas, and the system can be used as normal at UiT.
In Norway, SIKT is responsible for the agreement with Instructure. SIKT, UiT and other educational institutions in Norway are now working together to gain clarity on the situation and assess whether further measures are necessary. Such an agreement cannot provide absolute guarantees, and there will always be a risk that the data has already been copied or may surface at a later point in time.
All indications nevertheless suggest that any data stolen from UiT has now been deleted and will not be made public.
Kortnytt fra
