Security Incident Update & FAQs

For Faculty

We understand how challenging the last few days have been as you have dealt with disruption to Canvas during what we know is an especially busy time of year. First and foremost, we’re sorry – to you and your students, for how this disruption has impacted your teaching and learning. We’ve collected the FAQs and resources below to support you as we continue to respond to this incident. If you have any further questions, please contact your institution. They are best equipped to contact us directly.
 

Please click here for a one-page summary of the incident, including what happened and our response.

Faculty FAQs:

Is it safe for me to use Canvas?

Yes. Canvas is fully back online and available for use. Our external forensic partner has reviewed the known indicators and found no evidence that the threat actor currently has access to the platform

Was any of my personal data involved in this incident?

Our comprehensive review of the data involved is ongoing, but none of the data fields we understand to be involved are designed to store information like passwords, dates of birth, healthcare information, social security numbers, financial information, student grades or disciplinary records.

Was any of my classroom information, including correspondence with students, involved in this incident?

Our investigation so far indicates that the data fields involved include information like usernames, email addresses, course names, enrollment information and messages. Our investigation has not identified core learning data (course content, submissions, credentials) as involved.

Will this incident impact my ability to administer final exams or submit final grades for this semester?

Now Canvas is fully back online and available for use there should be no impact to your academic responsibilities.

Who at my institution should I be in touch with to discuss this further?

Your regular IT or Teaching & Learning professional is the best person to contact to discuss further.