Eindhoven University of Technology, Tilburg University and Fontys University of Applied Sciences do not yet know whether data from them was also stolen during the major hack on the Canvas education software. Spokespeople for the three educational institutions informed Omroep Brabant on Tuesday. The three institutions do use Canvas, they indicate. This does not apply to Avans University of Applied Sciences.
The large-scale hack of the education software, which came to light on Monday, involves data from dozens of Dutch educational institutions. This can be read in a list of all affected educational institutions that was shared on the dark web by the hacker group Shinyhunters. reports BNR.
When asked, TU/e, Tilburg University and Fontys University of Applied Sciences stated that they were still investigating whether they were victims of the hack. Spokespeople indicate that they are in contact with the supplier about this. The three educational institutions say they have also informed students and employees of the attack on the system. In that message they also informed employees and students that the system is safe to use.
What did the hackers steal?
ShinyHunters managed to break into a database of Canvas producer Instructure, stealing names, email addresses, student numbers and messages that users have sent to each other. According to the hackers, this concerns data from more than 275 million students, teachers and educational staff, spread across 9,000 educational institutions worldwide.
A list now released by Shinyhunters on the dark web and seen by BNR shows that dozens of Dutch educational institutions are also involved in the hack. This would involve a total of 44 institutions throughout the country. It is therefore still unclear whether any Brabant institutions are on the list.
Where do you know ShinyHunters from?
Hacker group ShinyHunters is known for the recent major attack on telecom provider Odido, in which data from millions of Dutch customers was stolen.
Recently, other companies have also been in the news where customer data was stolen, for example Basic-Fit. There was also a lot of fuss about the hack at software supplier ChipSoft, in which patient data from, among others, a number of GP practices in Brabant was stolen.
Here you can read all the stories about cyber attacks in Brabant.

