The Lighthouse IT Podcast
The Lighthouse IT Podcast - May 29th, 2026 What Happens When 275 Million Users Depend on One Platform? In this episode of the Lighthouse IT Solutions podcast, Matt and Griffin discuss the April Canvas (Instructure) breach claimed by ShinyHunters, involving about 3.65 TB of exfiltrated data affecting roughly 275 million users across about 9,000 institutions, including names, emails, student IDs, and private messages. They recap a timeline of detection, public disclosure, a second disruption during finals week with a ransom note replacing the login page, and reports of a ransom agreement around May 11, followed by fallout, including a class action lawsuit and a Homeland Security investigation. This emphasizes the risks of vendor concentration, the need for incident-response planning, third-party risk management, backups, MFA, segmentation, and encryption at rest, and we advise impacted users to change passwords, enable MFA, and watch for targeted phishing using stolen context. Don't miss out on our discussions and more! https://hub.lighthousesol.com/blog/lighthouse-podcast-2/canvas-breach-lessons-in-cybersecurity-466 [https://hub.lighthousesol.com/blog/lighthouse-podcast-2/canvas-breach-lessons-in-cybersecurity-466] 01:28 What Canvas Is 02:07 Breach Scale And Data 03:08 ShinyHunters Background 04:49 Extortion And Finals Week 07:11 Timeline And Ransom Payment 10:30 Repeat Attacks And Security 13:03 Private Messages Fallout 15:29 Will Hackers Delete Data 17:43 What Was Not Compromised 18:37 How They Got In 19:20 Canvas Accountability Gap 19:37 Paying ShinyHunters 21:54 Vendor Concentration Risk 26:12 Transparency And PR 27:00 Patch Or Negotiate 29:42 Third Party Risk 30:45 Backups And Encryption 34:07 If You Were Affected 35:54 Wrap Up And Where To Watch
146 episodios
Comentarios
0Sé la primera persona en comentar
¡Regístrate ahora y únete a la comunidad de The Lighthouse IT Podcast!