Members of the US House of Representatives are demanding an explanation regarding cybersecurity from Instructure, a developer of educational software. Two separate attacks on the company's systems resulted in the theft of personal data belonging to millions of students worldwide. Andrew Garbarino, Chairman of the House Subcommittee on Cybersecurity and Infrastructure Protection, announced an investigation in a letter to company CEO Steve Daly. This is reported by Techcrunch.com reports.
The committee aims to determine how hackers were able to repeatedly access Instructure's systems, what types of data were leaked, and the extent of the company's cooperation with CISA. The company, known for its Canvas learning portal, is facing sharp criticism for hackers using the same vulnerability to both steal data and compromise school login pages.
Instructure claims it reached an agreement with the hackers and provided evidence that they deleted the stolen data. However, a representative of the ShinyHunters hacking group refused to disclose the payment amount. Cybersecurity experts emphasize that paying hackers funds future attacks and that stolen data may still be retained.
Andrew Garbarino noted that a second attack by the same hackers raises serious questions about the company's incident response capabilities and its obligations to customers. So far, there has been no official statement on whether Instructure management or Steve Daly are prepared to testify before Congress.
Read “Zamin” on Telegram!
