Frequently Asked Questions Cyber Incident Canvas

FAQ Cyber Incident Canvas

• What happened?

  A hack on the educational software Canvas stole data from 44 Dutch educational institutions and took Canvas off the air, potentially involving data from some 275 million users worldwide. The attack was claimed by the hacker collective ShinyHunters, which was also behind the Odidio cyber attack earlier this year.

  Canvas' supplier (Instructure) confirmed that the Vrije Universiteit Amsterdam was also affected.

• Who was hit?

  Students, staff and support personnel.

• Should I take action as a student or employee at VU?

  Keep an eye on this page for the latest updates regarding education. VU is monitoring the situation closely and will update this page as soon as there is more news.

  However, it is important to stay alert for phishing emails. If your email address is part of the data breach, the likelihood of these types of messages may increase.

  Want to know how to recognize phishing emails? Then check out this page of tips.

• Does VU collaborate with other educational institutions in this research?

  The VU is in close contact with other educational institutions and the umbrella organization Universities of the Netherlands (UNL) and is actively monitoring the situation, sharing information where possible and taking joint action towards the supplier and other parties involved. See also the statement ofUNL online.

• Can I continue to use Canvas?

  No, at this time Canvas is not available. Please keep an eye on this page regarding updates on tracking education.

• What data was leaked?

  Based on the information now available, this includes data such as student and staff names, e-mail addresses, student and staff numbers and possibly messages sent within Canvas.

• Does this affect current courses, exams or assignments?

  Canvas is not available at this time. Keep an eye on this page regarding updates on tracking education.

• Where can I find the latest news on this incident?

  On this page we post the latest information, updates and a FAQ.

• Where can I go for questions and concerns about this incident?

  Employees and students can contact the IT Service Desk for information security issues. This applies, for example, if they are unexpectedly contacted about this incident in relation to their Canvas account, or if it appears to be phishing/scams. These teams can help assess the situation and the follow-up steps needed. To discuss concerns about the situation check out where to go for this at VU here.