Good afternoon!
Yesterday we sent out a notification about Papercut being taken off line due to technical issues. Those issues were related to a reported product issue, and a related security advisory that was released this past weekend.
Our initial investigation showed the potential for a breach, so we immediately shut off accessibility to the server as a precaution and as a part of our standard response.
Before we get into the details of our response - I need to say that throughout this investigation, we have not seen any symptoms of a mass exfiltration of data, or other resources. We have also not seen any symptoms or evidence of movement on our network, outside of this one server, hosting Papercut.
We have since taken action, based on the vendor's direction to better protect this platform.
- We have restored PaperCut functionality to the MCAD Campus - it is working as expected.
- Unfortunately, due to this issue - we will no longer be hosting PaperCut to the public internet. Papercut will now be available on campus and on campus networks ONLY.
Again, at this time we haven't seen any symptoms of an exfiltration of student/staff/faculty data, or other movements on our networks or infrastructure. We will continue to perform extra monitoring and heightened awareness towards the Papercut platform.
Thank you!
Respectfully,
Matthew Hoban