To our Free-for-Teacher users,
The Canvas Free-for-Teacher program is a product offering we have had since the beginning of our company. It is a program intended for individual educators at traditional schools and higher education organizations.
We want to apologize for how disruptive the last few weeks have been due to our Free-for-Teacher accounts being offline. While this was a necessary step to secure our system following the recent incident, it doesn’t diminish the disruption it has caused to your teaching and learning. We are temporarily restoring access to the product in a secure, limited capacity from 12 am ET on May 28 through 11:59 pm ET on May 29 so that you can safely download course content and close out the school year.
We also want to reassure you that we made the decision to restore temporary access with significant caution and after implementing multiple additional safeguards to strengthen the platform’s security, including:
- CrowdStrike tested the elements of the known attack chains against the application version with Instructure's remediations applied, and found that the remediated version was no longer vulnerable to those same attack chain elements
- Disabling new account creation during this temporary restoration period
- Removing administrative and support functionality from the Free-for-Teacher platform to help prevent unauthorized access and privilege escalation
- Turned over all existing tokens
- Implementing additional technical protections, including removing token-generation capabilities
- Fully segregating the Free-for-Teacher database and application server from the broader Instructure environment
- Protecting the platform behind a new, redundant firewall architecture
Additionally, we have implemented several technical enhancements to help protect the platform, such as removing token-generation capabilities. The Free-For-Teacher database and app server are completely segregated from the rest of the Instructure environment and protected behind a new, redundant firewall. Finally, we will deploy real-time human monitoring of all traffic and network activity on Free-for-Teacher during its open hours.
During this temporary restoration period, your course content will be fully accessible and can be exported as usual.
In the coming weeks, we will be in touch to share more information about how we plan to support our Free-For-Teacher users moving forward. We are committed to providing a free offering for individual educators.
Thank you for your continued patience as we navigate this incident.