×
Every fusion startup that has raised over 0M | TechCrunch

Every fusion startup that has raised over $100M | TechCrunch

Over the last several years, fusion power has gone from the butt of jokes — always a decade away! — to an increasingly tangible and tantalizing technology that has drawn investors off the sidelines.

The technology may be challenging to master and expensive to build today, but fusion promises to harness the nuclear reaction that powers the sun to generate nearly limitless energy here on Earth. If startups are able to complete commercially viable fusion power plants, then they have the potential to upend trillion-dollar markets.

The bullish wave buoying the fusion industry has been driven by three advances: more powerful computer chips, more sophisticated AI, and powerful high-temperature superconducting magnets. Together, they have helped deliver more sophisticated reactor designs, better simulations, and more complex control schemes.

It doesn’t hurt that, at the end of 2022, a U.S. Department of Energy lab announced that it had produced a controlled fusion reaction that produced more power than the lasers had imparted to the fuel pellet. The experiment had crossed what’s known as scientific breakeven, and while it’s still a long ways from commercial breakeven, where the reaction produces more than the entire facility consumes, it was a long-awaited step that proved the underlying science was sound.

Founders have built on that momentum in recent years, pushing the private fusion industry forward at a rapid pace.

Commonwealth Fusion Systems

With a $1.8 billion Series B, Commonwealth Fusion Systems catapulted itself into the pole position in 2021. Since then, the company has been quiet on the fundraising front (no surprise), but it has been hard at work in Massachusetts building Sparc, its first-of-a-kind power plant intended to produce power at what it calls “commercially relevant” levels. 

Sparc’s reactor uses a tokamak design, which resembles a doughnut. The D-shaped cross section is wound with high-temperature superconducting tape, which when energized, generates a powerful magnetic field that will contain and compress the superheated plasma. In Sparc’s successor, the commercial-scale Arc, heat generated from the reaction is converted to steam to power a turbine. CFS designed its magnets in collaboration with MIT, where co-founder and CEO Bob Mumgaard worked as a researcher on fusion reactor designs and high-temperature superconductors.

Backed by Breakthrough Energy Ventures, The Engine, Bill Gates, and others, Devens, Massachusetts-based CFS expects to have Arc operational in the early 2030s. The company has raised a total of $2 billion, according to PitchBook.

TAE

Founded in 1998, TAE Technologies (formerly known as Tri Alpha Energy) was spun out of the University of California, Irvine by Norman Rostoker. It uses a field-reversed configuration, but with a twist: after the two plasma shots collide in the middle of the reactor, the company bombards the plasma with particle beams to keep it spinning in a cigar shape. That improves the stability of the plasma, allowing more time for fusion to occur and for more heat to be extracted to spin a turbine. 

The company raised $150 million in June from existing investors, including Google, Chevron, and New Enterprise. TAE has raised $1.79 billion in total, according to PitchBook.

Helion

Of all fusion startups, Helion has the most aggressive timeline. The company plans to produce electricity from its reactor in 2028. Its first customer? Microsoft.

Helion, based in Everett, Washington, uses a type of reactor called a field-reversed configuration, where magnets surround a reaction chamber that looks like an hourglass with a bulge at the point where the two sides come together. At each end of the hourglass, they spin the plasma into doughnut shapes that are shot toward each other at more than 1 million mph. When they collide in the middle, additional magnets help induce fusion. When fusion occurs, it boosts the plasma’s own magnetic field, which induces an electrical current inside the reactor’s magnetic coils. That electricity is then harvested directly from the machine.

The company raised $425 million in January 2025, around the same time that it turned on Polaris, a prototype reactor. Helion has raised $1.03 billion, according to PitchBook. Investors include Sam Altman, Reid Hoffman, KKR, BlackRock, Peter Thiel’s Mithril Capital Management, and Capricorn Investment Group.

Pacific Fusion

Pacific Fusion burst out of the gate with a $900 million Series A, a whopping sum even among well-funded fusion startups. The company will use inertial confinement to achieve fusion, but instead of lasers compressing the fuel, it will use coordinated electromagnetic pulses. The trick is in the timing: All 156 impedance-matched Marx generators need to produce 2 terawatts for 100 nanoseconds, and those pulses need to simultaneously converge on the target.

The company is led by CEO Eric Lander, the scientist who led the Human Genome Project, and president Will Regan. Pacific Fusion’s funding might be massive, but the startup hasn’t gotten it all at once. Rather, its investors will pay out in tranches when the company achieves specified milestones, an approach that’s common in biotech.

Shine Technologies

Shine Technologies is taking a cautious — and possibly pragmatic — approach to generating fusion power. Selling electrons from a fusion power plant is years off, so instead, it’s starting by selling neutron testing and medical isotopes. More recently, it has been developing a way to recycle radioactive waste. Shine hasn’t picked an approach for a future fusion reactor, instead saying that it’s developing necessary skills for when that time comes.

The company has raised a total of $778 million, according to PitchBook. Investors include Energy Ventures Group, Koch Disruptive Technologies, Nucleation Capital, and the Wisconsin Alumni Research Foundation.

General Fusion

Now its third-decade, General Fusion has raised $440.53 million, according to PitchBook. The Richmond, British Columbia-based company was founded in 2002 by physicist Michel Laberge, who wanted to prove a different approach to fusion known as magnetized target fusion (MTF). Investors include Jeff Bezos, Temasek, BDC Capital, and Chrysalix Venture Capital.

In an General Fusion’s reactor, a liquid metal wall surrounds a chamber in which plasma is injected. Pistons surrounding the wall push it inward, compressing the plasma inside and sparking a fusion reaction. The resulting neutrons heat the liquid metal, which can be circulated through a heat exchanger to generate steam to spin a turbine.

General Fusion hit a rough patch in spring 2025. The company ran short of cash as it was building LM26, its latest device that it hoped would hit breakeven in 2026. Just days after hitting a key milestone, it laid off 25% of its staff.

Tokamak Energy

Tokamak Energy takes the usual tokamak design — the doughnut shape — and squeezes it, reducing its aspect ratio to the point where the outer bounds start resembling a sphere. Like many other tokamak-based startups, the company uses high-temperature superconducting magnets (of the rare earth barium copper oxide, or REBCO, variety). Since its design is more compact than a traditional tokamak, it requires less in the way of magnets, which should reduce costs. 

The Oxfordshire, UK-based startup’s ST40 prototype, which looks like a large, steampunk Fabergé egg, generated an ultra-hot, 100 million degree C plasma in 2022. Its next generation, Demo 4, is currently under construction and is intended to test the company’s magnets in “fusion power plant-relevant scenarios.” Tokamak Energy raised $125 million in November 2024 to continue its reactor design efforts and expand its magnet business.

In total, the company has raised $336 million from investors including Future Planet Capital, In-Q-Tel, Midven, and Capri-Sun founder Hans-Peter Wild, according to PitchBook.

Zap Energy

Zap Energy isn’t using high-temperature superconducting magnets or super-powerful lasers to keep its plasma confined. Rather, it zaps the plasma (get it?) with an electric current, which then generates its own magnetic field. The magnetic field compresses the plasma about 1 millimeter, at which point ignition occurs. The neutrons released by the fusion reaction bombard a liquid metal blanket that surrounds the reactor, heating it up. The liquid metal is then cycled through a heat exchanger, where it produces steam to drive a turbine.

Like Helion, Zap Energy is based in Everett, Washington, and the company has raised $327 million, according to PitchBook. Backers include Bill Gates’ Breakthrough Energy Ventures, DCVC, Lowercarbon, Energy Impact Partners, Chevron Technology Ventures, and Bill Gates as an angel.

Proxima Fusion

Most investors have favored large startups that are pursuing tokamak designs or some flavor of inertial confinement. But stellarators have shown great promise in scientific experiments, including the Wendelstein 7-X reactor in Germany.

Proxima Fusion is bucking the trend, though, having attracted a €130 million Series A that brings its total raised to more than €185 million. Investors include Balderton Capital and Cherry Ventures.

Stellarators are similar to tokamaks in that they confine plasma in a ring-like shape using powerful magnets. But they do it with a twist — literally. Rather than force plasma into a human-designed ring, stellarators twist and bulge to accommodate the plasma’s quirks. The result should be a plasma that remains stable for longer, increasing the chances of fusion reactions.

Marvel Fusion

Marvel Fusion follows the inertial confinement approach, the same basic technique that the National Ignition Facility used to prove that controlled nuclear fusion reactions could produce more power than was needed to kick them off. Marvel fires powerful lasers at a target embedded with silicon nanostructures that cascade under the bombardment, compressing the fuel to the point of ignition. Because the target is made using silicon, it should be relatively simple to manufacture, leaning on the semiconductor manufacturing industry’s decades of experience.

The inertial confinement fusion startup is building a demonstration facility in collaboration with Colorado State University, which it expects to have operational by 2027. Munich-based Marvel has raised a total of $161 million from investors including b2venture, Deutsche Telekom, Earlybird, HV Capital, and Taavet Hinrikus and Albert Wenger as angels.

First Light

First Light dropped its pursuit of fusion power in March 2025, pivoting instead to become a technology supplier to fusion startups and other companies. The startup had previously followed an approach known as inertial confinement, in which fusion fuel pellets are compressed until they ignite. 

First Light, which is based in Oxfordshire, U.K., has raised $140 million, according to PitchBook, from investors including Invesco, IP Group, and Tencent.

Xcimer

Though nothing about fusion can be described as simple, Xcimer takes a relatively straightforward approach: follow the basic science that’s behind the National Ignition Facility’s breakthrough net-positive experiment, and redesign the technology that underpins it from the ground up. The Colorado-based startup is aiming for a 10-megajoule laser system, five times more powerful than NIF’s setup that made history. Molten salt walls surround the reaction chamber, absorbing heat and protecting the first solid wall from damage.

Founded in January 2022, Xcimer has already raised $109 million, according to PitchBook, from investors including Hedosophia, Breakthrough Energy Ventures, Emerson Collective, Gigascale Capital, and Lowercarbon Capital.

This story was originally published in September 2024 and will be continually updated.

Source link
#fusion #startup #raised #100M #TechCrunch


French prosecutors who are investigating Elon Musk and his social media platform X have summoned the billionaire to France to face preliminary charges. The investigation is now officially a criminal probe, according to French officials.

France opened a probe in 2025 to investigate whether X has violated French law, an investigation that has expanded following incidents last year when Musk’s AI chatbot Grok started denying the Holocaust, praising Hitler, and allegedly generating child sexual abuse material when prompted by users.

According to the Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.”

Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over $290 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to $1 million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

Musk, who is currently worth $803 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health.

Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

“This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal.

X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.

#French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok">French Prosecutors Want Elon Musk and Linda Yaccarino to Face Preliminary Charges
                French prosecutors who are investigating Elon Musk and his social media platform X have summoned the billionaire to France to face preliminary charges. The investigation is now officially a criminal probe, according to French officials. France opened a probe in 2025 to investigate whether X has violated French law, an investigation that has expanded following incidents last year when Musk’s AI chatbot Grok started denying the Holocaust, praising Hitler, and allegedly generating child sexual abuse material when prompted by users. According to the Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

 French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.” Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

 Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over 0 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to  million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

 Musk, who is currently worth 3 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health. Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

 “This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal. X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.      #French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok

Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.”

Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over $290 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to $1 million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

Musk, who is currently worth $803 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health.

Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

“This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal.

X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.

#French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok">French Prosecutors Want Elon Musk and Linda Yaccarino to Face Preliminary ChargesFrench Prosecutors Want Elon Musk and Linda Yaccarino to Face Preliminary Charges
                French prosecutors who are investigating Elon Musk and his social media platform X have summoned the billionaire to France to face preliminary charges. The investigation is now officially a criminal probe, according to French officials. France opened a probe in 2025 to investigate whether X has violated French law, an investigation that has expanded following incidents last year when Musk’s AI chatbot Grok started denying the Holocaust, praising Hitler, and allegedly generating child sexual abuse material when prompted by users. According to the Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

 French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.” Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

 Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over $290 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to $1 million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

 Musk, who is currently worth $803 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health. Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

 “This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal. X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.      #French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok

French prosecutors who are investigating Elon Musk and his social media platform X have summoned the billionaire to France to face preliminary charges. The investigation is now officially a criminal probe, according to French officials.

France opened a probe in 2025 to investigate whether X has violated French law, an investigation that has expanded following incidents last year when Musk’s AI chatbot Grok started denying the Holocaust, praising Hitler, and allegedly generating child sexual abuse material when prompted by users.

According to the Wall Street Journal, Musk and former CEO Linda Yaccarino have been asked to travel to France to face preliminary charges. As the Journal explains, after preliminary charges have been filed in France, an investigating magistrate starts a process that can take months and doesn’t necessarily mean a trial will be held. It’s entirely possible that the case could ultimately be dropped.

French authorities are looking into the “complicity” of Musk in creating sexual abuse images of minors and sexually explicit deepfakes, according to the Associated Press. Grok also allegedly spread misinformation in French, including a claim that Auschwitz wasn’t a death camp during the Holocaust but was used for “disinfection with Zyklon B against typhus.”

Musk purchased Twitter in late 2022 and changed the name to X. The billionaire made many changes to the platform, stripping away safeguards that allowed people to know when an account was verified, and inviting back far-right figures who had previously been banned. Musk welcomed users like white supremacist Nick Fuentes and conspiracy theorist Alex Jones, among a host of others.

Musk also tinkered with the site in ways that turned it into a hotbed of far-right extremism and pro-Trump propaganda in the lead-up to the 2024 presidential election. Musk donated over $290 million to Republicans in the 2024 cycle and even ran a program that paid some voters in swing states up to $1 million to sign a “petition,” a move that was just very clearly an attempt at paying people to vote for Trump.

Musk, who is currently worth $803 billion, was rewarded with a job overseeing the dismantling of agencies in the federal government under the auspices of DOGE, the Department of Government Efficiency. Ultimately, about 300,000 government workers lost their jobs, and USAID was unlawfully dissolved. The cuts to global aid are estimated to lead to 23 million deaths by the year 2030, according to an analysis by The Lancet Global Health.

Last month, the U.S. Department of Justice told French authorities the U.S. wouldn’t assist in any investigation of Musk and X, something that wasn’t a surprise given the billionaire oligarch’s ties to the Trump regime.

“This investigation seeks to use the criminal legal system in France to regulate a public square for the free expression of ideas and opinions in a manner contrary to the First Amendment of the United States Constitution,” the April letter said, according to the Wall Street Journal.

X didn’t immediately respond to questions emailed Thursday about whether Musk planned on traveling to France. Gizmodo will update this article if we hear back.

#French #Prosecutors #Elon #Musk #Linda #Yaccarino #Face #Preliminary #ChargesElon Musk,Grok

ransomware gangs and data extortion attacks. But never before, perhaps, has a cyberattack against a single software platform so thoroughly disrupted the daily operations of thousands of schools across the United States.

The widely used digital learning platform Canvas was put into “maintenance mode” on Thursday after its maker, the education tech giant Instructure, suffered a data breach and faced an extortion attempt by attackers using the recognizable moniker “ShinyHunters.” Though the hackers have been advertising the breach and attempting to extract a ransom payment from Instructure since May 1, the situation took on additional immediacy for regular people across the US and beyond on Thursday because the Canvas downtime caused chaos at schools, including those in the midst of finals and end-of-year assignments.

Universities like Harvard, Columbia, Rutgers, and Georgetown sent alerts to students about the situation in recent days; other institutions, including school districts in at least a dozen states, also appear to have been affected. In a list published by the hackers behind the attack on their ransom-focused dark web site, they claim the breach affected more than 8,800 schools. The exact scale and reach of the breach is currently unclear, though. And the fact that Canvas was down throughout Thursday afternoon and evening further complicated the picture.

In a running incident update log that began on May 1, Steve Proud, Instructure’s chief information security officer, said that the company had “recently experienced a cybersecurity incident perpetrated by a criminal threat actor.” He added on May 2 that “the information involved” for “users at affected institutions” included names, email addresses, student ID numbers, and messages exchanged by users on the platform.

The situation was ultimately marked as “Resolved” on Wednesday, with Proud writing that “Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.” At midday on Thursday, though, the Instructure status page registered an “issue” where “some users are having difficulties logging into Student ePortfolios.” Within a few hours, the company had added another status update: “Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode.” Late Thursday evening, the company said that Canvas was available again “for most users.”

TechCrunch reported on Thursday that the hackers launched a secondary wave of attacks, defacing some schools’ Canvas portals by injecting an HTML file to display their own message on the schools’ Canvas login pages. According to The Harvard Crimson, attackers modified the Harvard Canvas login page to show a message that included a list of schools that the hackers claim were impacted by the breach.

The message from attackers “urged schools included on the affected list to consult with a cyber advisory firm and contact the group privately to negotiate a settlement before the end of the day on May 12—or else risk their data being leaked,” The Crimson reported. “It is unclear what information tied to Harvard affiliates was included in the alleged breach.”

Instructure did not immediately respond to a request for comment about Thursday’s outages and how they fit into the bigger picture of the breach. But the situation is significant given that a massive trove of student information has potentially been exposed, and the visibility of the incident across the country makes it a key example of a longstanding, yet endlessly escalating problem of data extortion and ransomware attacks.

The ShinyHunters name is associated with massive data dumps and has been linked to the infamous hacker collective known as the Com. But as the constellation of actors has shifted over the years, numerous attackers have taken up the most prominent Com-related monikers. A number of recent attacks have invoked other names, such as Lapsus$, with little or no connection to the original group that operated under the name.

#Canvas #Hack #Kind #Ransomware #Debacleransomware,cybersecurity,malware,hacks,hacking,security,vulnerabilities">The Canvas Hack Is a New Kind of Ransomware DebacleHigher education has long been a target of ransomware gangs and data extortion attacks. But never before, perhaps, has a cyberattack against a single software platform so thoroughly disrupted the daily operations of thousands of schools across the United States.The widely used digital learning platform Canvas was put into “maintenance mode” on Thursday after its maker, the education tech giant Instructure, suffered a data breach and faced an extortion attempt by attackers using the recognizable moniker “ShinyHunters.” Though the hackers have been advertising the breach and attempting to extract a ransom payment from Instructure since May 1, the situation took on additional immediacy for regular people across the US and beyond on Thursday because the Canvas downtime caused chaos at schools, including those in the midst of finals and end-of-year assignments.Universities like Harvard, Columbia, Rutgers, and Georgetown sent alerts to students about the situation in recent days; other institutions, including school districts in at least a dozen states, also appear to have been affected. In a list published by the hackers behind the attack on their ransom-focused dark web site, they claim the breach affected more than 8,800 schools. The exact scale and reach of the breach is currently unclear, though. And the fact that Canvas was down throughout Thursday afternoon and evening further complicated the picture.In a running incident update log that began on May 1, Steve Proud, Instructure’s chief information security officer, said that the company had “recently experienced a cybersecurity incident perpetrated by a criminal threat actor.” He added on May 2 that “the information involved” for “users at affected institutions” included names, email addresses, student ID numbers, and messages exchanged by users on the platform.The situation was ultimately marked as “Resolved” on Wednesday, with Proud writing that “Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.” At midday on Thursday, though, the Instructure status page registered an “issue” where “some users are having difficulties logging into Student ePortfolios.” Within a few hours, the company had added another status update: “Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode.” Late Thursday evening, the company said that Canvas was available again “for most users.”TechCrunch reported on Thursday that the hackers launched a secondary wave of attacks, defacing some schools’ Canvas portals by injecting an HTML file to display their own message on the schools’ Canvas login pages. According to The Harvard Crimson, attackers modified the Harvard Canvas login page to show a message that included a list of schools that the hackers claim were impacted by the breach.The message from attackers “urged schools included on the affected list to consult with a cyber advisory firm and contact the group privately to negotiate a settlement before the end of the day on May 12—or else risk their data being leaked,” The Crimson reported. “It is unclear what information tied to Harvard affiliates was included in the alleged breach.”Instructure did not immediately respond to a request for comment about Thursday’s outages and how they fit into the bigger picture of the breach. But the situation is significant given that a massive trove of student information has potentially been exposed, and the visibility of the incident across the country makes it a key example of a longstanding, yet endlessly escalating problem of data extortion and ransomware attacks.The ShinyHunters name is associated with massive data dumps and has been linked to the infamous hacker collective known as the Com. But as the constellation of actors has shifted over the years, numerous attackers have taken up the most prominent Com-related monikers. A number of recent attacks have invoked other names, such as Lapsus$, with little or no connection to the original group that operated under the name.#Canvas #Hack #Kind #Ransomware #Debacleransomware,cybersecurity,malware,hacks,hacking,security,vulnerabilities

gangs and data extortion attacks. But never before, perhaps, has a cyberattack against a single software platform so thoroughly disrupted the daily operations of thousands of schools across the United States.

The widely used digital learning platform Canvas was put into “maintenance mode” on Thursday after its maker, the education tech giant Instructure, suffered a data breach and faced an extortion attempt by attackers using the recognizable moniker “ShinyHunters.” Though the hackers have been advertising the breach and attempting to extract a ransom payment from Instructure since May 1, the situation took on additional immediacy for regular people across the US and beyond on Thursday because the Canvas downtime caused chaos at schools, including those in the midst of finals and end-of-year assignments.

Universities like Harvard, Columbia, Rutgers, and Georgetown sent alerts to students about the situation in recent days; other institutions, including school districts in at least a dozen states, also appear to have been affected. In a list published by the hackers behind the attack on their ransom-focused dark web site, they claim the breach affected more than 8,800 schools. The exact scale and reach of the breach is currently unclear, though. And the fact that Canvas was down throughout Thursday afternoon and evening further complicated the picture.

In a running incident update log that began on May 1, Steve Proud, Instructure’s chief information security officer, said that the company had “recently experienced a cybersecurity incident perpetrated by a criminal threat actor.” He added on May 2 that “the information involved” for “users at affected institutions” included names, email addresses, student ID numbers, and messages exchanged by users on the platform.

The situation was ultimately marked as “Resolved” on Wednesday, with Proud writing that “Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.” At midday on Thursday, though, the Instructure status page registered an “issue” where “some users are having difficulties logging into Student ePortfolios.” Within a few hours, the company had added another status update: “Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode.” Late Thursday evening, the company said that Canvas was available again “for most users.”

TechCrunch reported on Thursday that the hackers launched a secondary wave of attacks, defacing some schools’ Canvas portals by injecting an HTML file to display their own message on the schools’ Canvas login pages. According to The Harvard Crimson, attackers modified the Harvard Canvas login page to show a message that included a list of schools that the hackers claim were impacted by the breach.

The message from attackers “urged schools included on the affected list to consult with a cyber advisory firm and contact the group privately to negotiate a settlement before the end of the day on May 12—or else risk their data being leaked,” The Crimson reported. “It is unclear what information tied to Harvard affiliates was included in the alleged breach.”

Instructure did not immediately respond to a request for comment about Thursday’s outages and how they fit into the bigger picture of the breach. But the situation is significant given that a massive trove of student information has potentially been exposed, and the visibility of the incident across the country makes it a key example of a longstanding, yet endlessly escalating problem of data extortion and ransomware attacks.

The ShinyHunters name is associated with massive data dumps and has been linked to the infamous hacker collective known as the Com. But as the constellation of actors has shifted over the years, numerous attackers have taken up the most prominent Com-related monikers. A number of recent attacks have invoked other names, such as Lapsus$, with little or no connection to the original group that operated under the name.

#Canvas #Hack #Kind #Ransomware #Debacleransomware,cybersecurity,malware,hacks,hacking,security,vulnerabilities">The Canvas Hack Is a New Kind of Ransomware Debacle

Higher education has long been a target of ransomware gangs and data extortion attacks. But never before, perhaps, has a cyberattack against a single software platform so thoroughly disrupted the daily operations of thousands of schools across the United States.

The widely used digital learning platform Canvas was put into “maintenance mode” on Thursday after its maker, the education tech giant Instructure, suffered a data breach and faced an extortion attempt by attackers using the recognizable moniker “ShinyHunters.” Though the hackers have been advertising the breach and attempting to extract a ransom payment from Instructure since May 1, the situation took on additional immediacy for regular people across the US and beyond on Thursday because the Canvas downtime caused chaos at schools, including those in the midst of finals and end-of-year assignments.

Universities like Harvard, Columbia, Rutgers, and Georgetown sent alerts to students about the situation in recent days; other institutions, including school districts in at least a dozen states, also appear to have been affected. In a list published by the hackers behind the attack on their ransom-focused dark web site, they claim the breach affected more than 8,800 schools. The exact scale and reach of the breach is currently unclear, though. And the fact that Canvas was down throughout Thursday afternoon and evening further complicated the picture.

In a running incident update log that began on May 1, Steve Proud, Instructure’s chief information security officer, said that the company had “recently experienced a cybersecurity incident perpetrated by a criminal threat actor.” He added on May 2 that “the information involved” for “users at affected institutions” included names, email addresses, student ID numbers, and messages exchanged by users on the platform.

The situation was ultimately marked as “Resolved” on Wednesday, with Proud writing that “Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.” At midday on Thursday, though, the Instructure status page registered an “issue” where “some users are having difficulties logging into Student ePortfolios.” Within a few hours, the company had added another status update: “Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode.” Late Thursday evening, the company said that Canvas was available again “for most users.”

TechCrunch reported on Thursday that the hackers launched a secondary wave of attacks, defacing some schools’ Canvas portals by injecting an HTML file to display their own message on the schools’ Canvas login pages. According to The Harvard Crimson, attackers modified the Harvard Canvas login page to show a message that included a list of schools that the hackers claim were impacted by the breach.

The message from attackers “urged schools included on the affected list to consult with a cyber advisory firm and contact the group privately to negotiate a settlement before the end of the day on May 12—or else risk their data being leaked,” The Crimson reported. “It is unclear what information tied to Harvard affiliates was included in the alleged breach.”

Instructure did not immediately respond to a request for comment about Thursday’s outages and how they fit into the bigger picture of the breach. But the situation is significant given that a massive trove of student information has potentially been exposed, and the visibility of the incident across the country makes it a key example of a longstanding, yet endlessly escalating problem of data extortion and ransomware attacks.

The ShinyHunters name is associated with massive data dumps and has been linked to the infamous hacker collective known as the Com. But as the constellation of actors has shifted over the years, numerous attackers have taken up the most prominent Com-related monikers. A number of recent attacks have invoked other names, such as Lapsus$, with little or no connection to the original group that operated under the name.

#Canvas #Hack #Kind #Ransomware #Debacleransomware,cybersecurity,malware,hacks,hacking,security,vulnerabilities

Post Comment