When trust becomes the attack surface

A ransomware attack on Canvas led to a payment of $300,000. The payment was made to restore access to student data and academic services. Organizations face legal, reputational, and operational risks when paying ransoms. Transparency in cyber incidents is increasingly expected by stakeholders. Cyber insurers and incident response teams assess recovery costs versus ransom demands.