Is GoReact down?

Instructure (Canvas) is currently undergoing a data breach (separate from the one earlier this week) and the attackers have gained control of many Canvas instances. Users of these instances will not be able to sign in or access any content. Data syncs (either to or from Canvas) are presumed non-functional at the moment. We are actively monitoring the situation as it develops.

In light of the recently reported global security incident involving Instructure Canvas, Echo360 is recommending that customers immediately disconnect their Canvas integration as a precautionary measure while the situation continues to be evaluated. While no Echo360 systems are affected, Echo360 is also prepared to disable integrations from our side where appropriate to help minimize potential risk. We will continue to monitor the situation closely and provide updates as more information becomes available. Please reach out directly to [email protected] for any assistance you require with working through this.

Instructure has provided additional details regarding the recent Canvas security incident, including that the activity originated through Free-For-Teacher accounts and that they have no current evidence of persistence or broader credential compromise. Free-For-Teacher accounts have been disabled as part of their containment efforts. As previously communicated, Echo360 has no evidence that any Echo360 systems, customer environments, or integrations have been compromised. Our recommendation to temporarily disconnect Canvas integrations remains precautionary while institutions evaluate their own security posture and risk tolerance. We continue to actively monitor the situation and will provide additional updates as more information becomes available from Instructure.