Although Instructure advised that Canvas was safe to use and could continue to operate normally, we took a precautionary approach and suspended access on Friday. The system is now working as expected and we’re confident we can rely on Instructure's assurance that it’s secure.
We tried to minimise disruption and are sorry for any inconvenience. Our priority was your security which is why we initially suspended access.
Canvas is used by over 9000 institutions globally and we know that we are one of many organisations affected. At WEA, Canvas holds information such as usernames, email addresses and messages sent within the platform. It does not store personal passwords, dates of birth, government identifiers or financial information.
Instructure has published FAQs about the incident here.
If you are worried or concerned and feel you need support, please contact us at [email protected].
Remain careful: although we have no reason to believe that anything malicious could happen, after widely reported cyber incidents such as these, it is always sensible to be alert to:
- Unexpected or urgent messages, including those that mention Canvas
- Unsolicited emails
- Requests for login details, account verification or personal information
If you receive a suspicious email delete it or contact the WEA if unsure.