Post #2373355

A friend who's a professor at CSU campus asked me my opinion about if it's safe to log into canvas. This was my answer. So I'm not involved in the recovery so I don't have any certainty. This is Instructures write up but when I read it it seemed pretty useless at this point basically saying we hired some contractors to help us figure out what happened. https://www.instructure.com/incident_update Here's a security journalist's write up. https://krebsonsecurity.com/2026/05/canvas-breach-disrupts-schools-colleges-nationwide/#more-73563 So the two factor from duo is what makes it safer to log in, it's harder to compromise an account using 2 factor. (though be suspicious of unexpected prompts) I'm very tempted to say it's never actually safe to log into a networked computer but that's probably just my cynicism talking. If you reused the password for work on anything else I'd probably recommend changing those to something else. Your schools single sign on may have kept any password away from canvas, so you may not need to change the password at canvas, but you should check any messages from your IT department if there's a need for password a reset.