Canvas Hackers Target Dozens More Colleges

ShinyHunters, the cybercrime group behind last month’s Canvas hack, may have gained access to human resources and financial management software at dozens of colleges, Higher Ed Dive reported Monday. 

ShinyHunters may have accessed the Oracle PeopleSoft software suite at more than 100 organizations between May 27 and June 9, according to a blog post from Google Threat Intelligence Group and the cybersecurity firm Mandiant. About 68 percent of those organizations are colleges or universities, and most are based in the U.S. Oracle sent out a security alert on June 10 but did not say whether any of its users had been breached. 

“While several organizations successfully blocked the activity or remediated the vulnerabilities, others experienced compromise, resulting in stolen data being published on the ShinyHunters DLS,” the blog post stated. 

The University of Nottingham in England confirmed it was part of the data breach, Higher Ed Dive reported. In an email to students, university officials said they were working to determine what data had been accessed.