Instructure security incident (Canvas)

We'd like to express our deepest sympathy for our partners, customers, teachers, and students affected by the Canvas security incident, particularly following the events of late last week. We understand that this is a particularly challenging time for everyone impacted, and we are sorry for the profound impact this has had on everyone during final exams and end-of-semester work.

Poll Everywhere remains unaffected by the security incident with Canvas. Poll Everywhere has been conducting internal investigations and reviews, and confirmed that there is no impact to the Poll Everywhere platform at this time. Additionally, Instructure has not notified Poll Everywhere that any data related to its services has been impacted.

Poll Everywhere's connection to Canvas uses the LTI Advantage standard, an industry-common integration pathway with a variety of LMS platforms, including (but not limited to) Canvas. We rely on a trusted set of keys provided by Instructure that validates that incoming data from Canvas is authentic. This key material is only changed by Instructure, and they have not changed it. However, if Instructure rotates this key material, Poll Everywhere will seamlessly update its data to trust the newly issued key material. The LTI standard also defines a set of keys that are maintained by Poll Everywhere. Poll Everywhere's key material (private keys) remains safely stored with Poll Everywhere, and has not been compromised. As a result, no API rotation, credential rotation, or other security-adjacent credential changes are necessary for any customer or end-user of Poll Everywhere to undertake, with respect to the Canvas integration, at this time.

Please reach out to support@polleverywhere.com if you have any questions related to the Canvas security incident and how it affects Poll Everywhere.

Please refer to https://www.instructure.com/incident_update and https://status.instructure.com/ for the status of the Canvas platform.

A security incident affecting Instructure (Canvas) has been announced. Poll Everywhere is not affected by this security incident. It is possible that later changes that affect Canvas may require re-initializing Canvas LMS connections, but currently we are not aware of customers experiencing problems with LMS integrations as a result of this security incident. Please contact Poll Everywhere if you are experiencing any issues with Canvas at support@polleverywhere.com. See: https://status.instructure.com/incidents/9wm4knj2r64z and https://status.instructure.com/incidents/ns0sjlmkvc6g. For information about the Canvas security incident, please reach out to your contact at Instructure directly.