For Faculty

Yes. Canvas is fully back online and available for use. Our external forensic partner has reviewed the known indicators and found no evidence that the threat actor currently has access to the platform

Our comprehensive review of the data involved is ongoing, but none of the data fields we understand to be involved are designed to store information like passwords, dates of birth, healthcare information, social security numbers, financial information, student grades or disciplinary records.

Our investigation so far indicates that the data fields involved include information like usernames, email addresses, course names, enrollment information and messages. Our investigation has not identified core learning data (course content, submissions, credentials) as involved.

Now Canvas is fully back online and available for use there should be no impact to your academic responsibilities.

Additionally, access to Free-for-Teacher is restored in a limited capacity from 12 am ET on May 28 through 11:59 pm ET on May 29 to enable educators who rely on the platform to safely download course content and close out the school year. After this period, the Free-for-Teacher program will be discontinued, but please stay tuned for updates on an enhanced Canvas products designed for former Free-For-Teacher users, set to launch this fall.

We are also in touch with Free-for-Teacher users directly with next steps regarding their use of Canvas.

Your regular IT or Teaching & Learning professional is the best person to contact to discuss further.

Canvas provides customers with multiple mechanisms to access, export, and manage their data, including APIs, Canvas Data, course export tools, and standards-based export formats, which institutions can use to support independent backup and archival workflows.

This incident reinforced the importance of continuity and disaster recovery capabilities, and Instructure is evaluating expanded backup access, export workflows, and resilience guidance to help institutions maintain teaching and administrative operations in the event of service disruptions.