The Awareness Angle: Cyber Security Awareness and Human Risk
May 18, 2026 · 53 min · 19 segments
This week the Canvas story is back. Instructure has paid ShinyHunters and says the stolen student data has been destroyed, but nobody in the security industry believes them. A telehealth platform…
[upbeat music] Right.
First up, nobody believes the hackers who breached Canvas actually deleted the student data.
275 million users across 9,000 schools worldwide.
It's huge.
And the data included names, emails, student IDs, and billions of private messages between students and their teachers.
Now, or a ransom.
It's not been disclosed, I don't think.
Um, and they've claimed to have received shred logs as proof of data destruction.
So they've paid to make the problem go away.
According to the register, every single security expert that they've spoken to doesn't believe that the data is gone.
They paid $2.85 million in Bitcoin, watched a video of the documents being deleted, and then five months later, that very same data was used to extort individual school districts.
It just moved down the pipe, moved down the line, went to the supply chain.
So it's, it's almost a supply chain attack at that point.
So, um, yeah.
Uh, I think this is, this is an example of, and we've spoken about this before, many businesses' attitudes to a ransomware attack will be pay the ransom, get the problem, make it go away, make it go away.
[upbeat music] Right.
First up, nobody believes the hackers who breached Canvas actually deleted the student data.
275 million users across 9,000 schools worldwide.
It's huge.
And the data included names, emails, student IDs, and billions of private messages between students and their teachers.
Now, or a ransom.
It's not been disclosed, I don't think.
Um, and they've claimed to have received shred logs as proof of data destruction.
So they've paid to make the problem go away.
According to the register, every single security expert that they've spoken to doesn't believe that the data is gone.
They paid $2.85 million in Bitcoin, watched a video of the documents being deleted, and then five months later, that very same data was used to extort individual school districts.
It just moved down the pipe, moved down the line, went to the supply chain.
So it's, it's almost a supply chain attack at that point.
So, um, yeah.
Uh, I think this is, this is an example of, and we've spoken about this before, many businesses' attitudes to a ransomware attack will be pay the ransom, get the problem, make it go away, make it go away.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.