Doctor of Business Admin, Sr Leader for Online Education (U MD School of Social Work), Knowledge Management, Virtual Teams, papa. (Notifications are off)
Instructure took a meaningful step forward this weekend in its response to the Canvas cybersecurity incident.
CEO Steve Daly issued a direct, named apology. The company added more substance to its Incident Update page. It disclosed the Free-For-Teacher root cause and named CrowdStrike as part of the response.
Those are real improvements.
But the response still has a deeper problem: Instructure is describing this as a platform security incident, while its customers are experiencing it as an academic continuity event.
Canvas is not just another enterprise system. It is where students get assignments, submit work, access grades, prepare for finals, and communicate with instructors. When Canvas is unavailable, defaced, or tied to exposed messages and identifying information—especially during finals week—the impact is not merely “inconvenience and concern.”
It hits the core academic operations of institutions.
That distinction matters. Academic leaders from universities including Illinois, Chicago, and ASU have been announcing canceled or delayed finals. Higher ed trade press is still being deflected to static statements. Direct questions about ransom payment are going unanswered. The scale of the breach and end-of-term disruption has not been fully acknowledged by the company at the center of it.
There is also a transparency issue. Instructure’s Incident Update page carries a noindex directive, meaning the company has published a public page while signaling search engines not to include it in search results. That may be technically defensible for a live operational page, but it is much harder to defend for the central public source during an active incident, when customers, students, parents, reporters, and institutional stakeholders are searching for authoritative information.
The point is not that Instructure has done nothing right. It has. The point is that the form of the response is improving faster than the substance.
Canvas built its market position in the 2010s on openness, customer alignment, and trust. That posture is not yet visible enough in Instructure’s response to this incident.
One step forward. One step back.
I wrote more in today’s On EdTech post: onedtech.philhillaa.com/p/on…
Canvas' parent company Instructure has been hacked, and the site is being held for ransom after suffering a data breach
Over 9000 schools have reportedly been affected and ~225 million users worldwide had their personal information potentially compromised
Why is any educational (or other) entity with a conscience doing any kind of business in this anti-human hell state? Can't believe there are still conferences, etc. going on these places... I refuse to travel to Gilead. Same with Florida and many others. Also, DC.
Someone at @Atlassian is like "I know let's take away 20% of the issue screen space on @Jira by moving the menus from the top to the left - and force it down everyone's throat!"
Dear @Grubhub lil suggestion: i need an easy way to either mark or remove items I dont like from future orders. That way I can build from the previous order without having to worry about re-ordering things we disliked. #continuousimprovement
Project 2025 but if it were liberal (Thread): "Restoring the family as the centerpiece of American life and protecting our children" A liberal perspective might focus on supporting a broader definition of family, including same-sex couples and single-parent households.
P2025 advocates for eliminating terms like "sexual orientation & gender identity" ("SOGI"), from federal rules, regulations, etc. < Lib: see these actions as discriminatory & harmful to marginalized communities , crucial for protecting civil rights and promoting social justice.
P2025 offers a vision of America rooted in traditional values, limited government, & rejection of "woke" ideology. A liberal perspective would likely offer a contrasting vision, emphasizing social justice, government accountability, and a more inclusive society.
You can put your zip code in here for specific timing of the solar eclipse in your area: usatoday.com/.../what-time-i…
here in 21209, it starts at 2:05, peaks at 3:21 and ends at 4:33, with 88.6% of sun obscured by the moon at peak. Not a total eclipse of the heart! (that song, uff)
@mtamaryland why does the app say train in 16 min, the sign at the stop says in 16 min but theres a train just arrived? This is unfortunately your normal. What would it take to get accurate tracking on signs & apps for the people who rely on your services for their livelihood?
@mtamaryland has been the same for as long as I can remember: inaccurate, spotty, just plain wrong tracking and reliably unreliable. Pretty sad. Who is in charge of this shameful operation and what would it take to make it work properly for the community?
When people grumble, not wanting to use Teams/Slack channels for organizational conversations, knowledge sharing/management or document co-creation - I guarantee in early 1990s there were kajillions of people who pushed back against starting to use email. Next paradigm is here.
Using Teams/Slack channels for important conversations in an organization instead of email is not just about knowledge sharing/management, it is actually also about inclusion - for current and for future colleagues to be able to access and participate in the dialog.
COVID opened up the expanding jack-in-the-box of how much work CAN be done remotely & many workplaces trying to messily stuff it back in (losing people) rather than re-think, re-prioritize, re-focus on maximizing the benefits of each location & hybrid work for a new (AI) world.
Arbitrarily making meetings f2f that could be hybrid - and end up leaving people out... Like what specifically requires f2f and can't be done any other way these days? I know there are some things like team-building physical activities but....