Cyberattack on Canvas
Canvas has been affected by a global cyberattack in which the personal data of students, lecturers and staff has been stolen. This includes users’ names, email addresses, student numbers and message history. Instructure (the provider of Canvas) states that there is currently no evidence that passwords, dates of birth, financial details or identity documents have also been stolen.
Instructure is currently investigating whether – and to what extent – Dutch institutions have been affected by the hack. As a precaution, Instructure has refreshed the access keys. As a result, access to certain functionality and content must be re-authorised on a one-off basis.
Coordination with Instructure
We are in contact with Instructure and will update this message if necessary. Institutions will also be notified directly by Instructure of any updates, as the agreements do not go through SURF.
Further information
- The latest status updates from Instructure
- Questions can be put directly to Instructure via incident-intake@instructure.com
