Edtech Firm Instructure Discloses Cyber Incident, Probes Impact

Instructure (Canvas) disclosed a cybersecurity incident under investigation by internal and external teams; some services (Canvas Data 2, Canvas Beta) are in maintenance and customers relying on API keys may be affected. The post notes this is the second significant Instructure incident in under a year, links the pattern of attacks in edtech to cloud CRM compromises and social engineering, and advises CISOs to monitor disclosures, rotate API credentials if advised, and prioritize vendor security for platforms holding student and teacher data.