Poll Everywhere Status

Resolved: Thank you for your continued use and support of Poll Everywhere.

We're sorry for the impact that the incident at Instructure has had on everyone impacted. With respect to the security incident at Instructure regarding Canvas, we believe that Instructure has directly communicated to all affected customers with resolution information about this incident. We believe this situation to be closed, and we will continue to monitor the situation in the background. For more information, on the Canvas side, please see: https://www.instructure.com/incident_update. Once again, Poll Everywhere was not impacted during the Canvas security incident.

In terms of future impact to Poll Everywhere, we expect no action to be required in terms of rotation of LMS setup or configuration.

We alter and adjust our security program, including organizational and technical controls, in response to security incidents in the industry, including this one. We will incorporate this incident into our future planning. We remain in contact with Instructure and will monitor their response to this situation going forward.

Again, to be extremely clear, Poll Everywhere has had no impact from this incident at Instructure. However, we believe it is our role as members of the security community to learn from all incidents, including this one.

If you have any questions, please feel free to reach out to [email protected].

Monitoring: We'd like to express our deepest sympathy for our partners, customers, teachers, and students affected by the Canvas security incident, particularly following the events of late last week. We understand that this is a particularly challenging time for everyone impacted, and we are sorry for the profound impact this has had on everyone during final exams and end-of-semester work.

Poll Everywhere remains unaffected by the security incident with Canvas. Poll Everywhere has been conducting internal investigations and reviews, and confirmed that there is no impact to the Poll Everywhere platform at this time. Additionally, Instructure has not notified Poll Everywhere that any data related to its services has been impacted.

Poll Everywhere's connection to Canvas uses the LTI Advantage standard, an industry-common integration pathway with a variety of LMS platforms, including (but not limited to) Canvas. We rely on a trusted set of keys provided by Instructure that validates that incoming data from Canvas is authentic. This key material is only changed by Instructure, and they have not changed it. However, if Instructure rotates this key material, Poll Everywhere will seamlessly update its data to trust the newly issued key material. The LTI standard also defines a set of keys that are maintained by Poll Everywhere. Poll Everywhere's key material (private keys) remains safely stored with Poll Everywhere, and has not been compromised. As a result, no API rotation, credential rotation, or other security-adjacent credential changes are necessary for any customer or end-user of Poll Everywhere to undertake, with respect to the Canvas integration, at this time.

Please reach out to [email protected] if you have any questions related to the Canvas security incident and how it affects Poll Everywhere.

Please refer to https://www.instructure.com/incident_update and https://status.instructure.com/ for the status of the Canvas platform.

Monitoring: A security incident affecting Instructure (Canvas) has been announced. Poll Everywhere is not affected by this security incident. It is possible that later changes that affect Canvas may require re-initializing Canvas LMS connections, but currently we are not aware of customers experiencing problems with LMS integrations as a result of this security incident. Please contact Poll Everywhere if you are experiencing any issues with Canvas at [email protected]. See: https://status.instructure.com/incidents/9wm4knj2r64z and https://status.instructure.com/incidents/ns0sjlmkvc6g. For information about the Canvas security incident, please reach out to your contact at Instructure directly.