When one cloud platform goes down, everyone feels it

Late last week, the Canvas learning management system — used by universities and schools across the globe — went offline after a cyber attack. Hackers claimed to have breached nearly 9,000 institutions and stolen names, email addresses, student IDs, and private messages. The outage hit during finals week at many universities, meaning thousands of students suddenly couldn’t access course materials or sit exams.

This was actually Canvas’s second breach in a matter of weeks. The attackers got in through Free-For-Teacher accounts, a feature with lighter sign-in checks than the main institutional platform. They found the weaker door, walked through it, and reached the bigger system beyond.

What does this have to do with your business?

Canvas is an education tool, so the direct connection might not be obvious. But the pattern is one that any business running on cloud software should recognise.

When you depend on a single platform for something critical, any outage becomes a full stop. A professional services firm relying on one cloud document system, a hospitality business running through a single booking platform, a manufacturer whose stock data lives in one place — each of them faces the same freeze when that platform goes dark. Downtime stops being an inconvenience and starts being a crisis.

The authentication gap matters too. Most businesses have at least one account that doesn’t follow the same rules as the rest — a contractor login, a shared service account, a guest user that nobody got around to reviewing. That’s exactly the kind of gap attackers look for. The Canvas breach happened because one tier of the platform had lighter security than another. It’s worth asking whether the same is true of your setup.

Three things worth checking now

• What happens if your main platform goes offline? Can staff work from email or local copies? Is there a paper trail someone can follow? If the answer is “we’d be stuck”, that’s the gap to close.
• Unused or lightly-secured accounts. Guest accounts, shared passwords, contractor access that was set up in a hurry and never reviewed — these are the weak doors. A quick audit takes less time than you’d think.
• A plan for downtime, written down. Not a lengthy disaster recovery document, just a one-pager: who calls who, where the backups live, what staff should do while the main system is unavailable. Test it once a year. For businesses across North Wales, especially those in Mold, Rhyl, or Llangollen that might be running on a single cloud setup without an internal IT team keeping an eye on things, this kind of preparation genuinely makes the difference between a bad afternoon and a lost week.

A single cloud platform going down shouldn’t take your whole business with it. If you haven’t thought through what a day without your main system would look like, Dragon Digital helps local businesses across North Wales map their dependencies and plug the gaps.