At 2:41pm MDT, Canvas went offline, apparently nationwide. By evening several news sources were reporting a data breach/hack of Canvas. The roster of institutions whose data was stolen runs to 233 pages.

Principles/Considerations (click the ⏵ to view)

• IAIA Data was taken — ShinyHunters Breach List (IAIA listing)
• Instructure has been uninformative to us
• Advice from LifeHacker
• Thursday Evening Activities
• Friday Morning Activities
• Setting up 2-Factor Authentication in Canvas (Canvas Resources pages)

Draft Message to Dept Chairs

• Canvas Email Communication Message (not sent)

Canvas Passwords Roster (See 1Password - Canvas Admin Accounts vault)

Backup of Canvas Gradebooks

API Access Tokens