Instructure Status
Instructure Canvas suffers confirmed security breach; names, emails, student IDs, and messages compromised.
Summary
Instructure disclosed a confirmed cybersecurity incident on May 1, 2026, affecting Canvas and related platforms. The breach exposed user identifying information including names, email addresses, student ID numbers, and user messages across affected institutions. The company revoked credentials, deployed patches, rotated keys, and found no evidence of password, date-of-birth, government ID, or financial data compromise; investigation continues with external forensics support.
Full text
To view uptime history for your instance of Canvas, click here. Subscribe to UpdatesSubscribe x Visit our support site. Get the Atom Feed or RSS Feed. Canvas, Canvas Beta and Canvas Test are under maintenance. Update - Instructure has placed Canvas, Canvas Beta and Canvas Test in maintenance mode. We anticipate being up soon, and will provide updates as soon as possible May 07, 2026 - 17:37 MDT Investigating - We are currently investigating this issue. May 07, 2026 - 14:41 MDT Some users are having difficulties logging into Student ePortfolios Investigating - We are currently investigating an issue where some users are having difficulties logging into Student ePortfolios. This is not affecting customers. May 07, 2026 - 11:21 MDT Uptime over the past 90 days. View historical uptime. Instructure Operational Canvas Partial Outage Canvas LMS ? Under Maintenance Canvas Catalog Operational Canvas Commons Operational Canvas Credentials Operational Canvas Data 2 Operational Canvas Mobile Operational Canvas Studio Operational Canvas Portfolio Operational Student ePortfolios Partial Outage Student Pathways Operational SIS Platform Operational 90 days ago 100.0 % uptime Today SIStemic Operational 90 days ago 100.0 % uptime Today DataSync Operational 90 days ago 100.0 % uptime Today Elevate Operational Elevate Data Quality Operational Elevate Data Sync Operational Elevate Standards Alignment Operational Impact Operational Learn Platform Operational Mastery Operational Mastery Connect Operational Item Bank Operational Online Testing Operational Support Tools Operational Support: Phones/Chat Operational Support: Webform/email Operational AWS Region Operational ca-central-1 ? Operational eu-central-1 ? Operational eu-west-1 ? Operational us-east-1 ? Operational us-west-2 ? Operational ap-southeast-1 ? Operational ap-southeast-2 ? Operational Operational Degraded Performance Partial Outage Major Outage Maintenance Major outage Partial outage No downtime recorded on this day. No data exists for this day. had a major outage. had a partial outage. Related No incidents or maintenance related to this downtime. Past Incidents May 7, 2026 Unsupported files for Groupdocs unable to render Resolved - This incident has been resolved. May 7, 11:37 MDT Identified - The issue has been identified and a fix is being implemented. May 7, 09:55 MDT Some users may not see their data in Canvas Portfolio Resolved - This incident has been resolved. May 7, 03:45 MDT Identified - The issue has been identified and a fix is being implemented. May 7, 01:24 MDT Investigating - We are currently investigating this issue. May 7, 01:11 MDT May 6, 2026 Confirmed Security Incident Resolved - UPDATE - Canvas is fully operational, and we are not seeing any ongoing unauthorized activity.As a precaution, we recommend customers follow security best practices, including enforcing MFA on privileged accounts, reviewing admin access, and rotating API tokens or keys where applicable.This will be our final update via this status page for this incident. We will continue to provide updates as appropriate through other channels and are now communicating directly with impacted customers to provide organization-specific information and support. May 6, 15:15 MDT Update - We are continuing to investigate this issue. May 6, 15:13 MDT Update - We are providing an update on the security incident we advised you of yesterday. While our investigation continues alongside our outside forensics experts, at this stage we believe the incident has been contained.Here are the steps we have taken since we became aware of the incident. We have:- Revoked privileged credentials and access tokens associated with affected systems- Deployed patches to enhance system security- Out of an abundance of caution, we rotated certain keys, even though there is no evidence they were misused- Implemented increased monitoring across all platformsWhile we continue actively investigating, thus far, indications are that the information involved consists of certain identifying information of users at affected institutions, such as names, email addresses, and student ID numbers, as well as messages among users. At this time, we have found no evidence that passwords, dates of birth, government identifiers, or financial information were involved. If that changes, we will notify any impacted institutions. Thank you for your patience as we work to resolve this matter. We sincerely regret any inconvenience or concern this may cause. We will continue to keep you apprised as our investigation progresses. For up-to-date information on specific systems, please continue to visit our status page.Steve ProudChief Information Security Officer May 2, 12:46 MDT Investigating - Instructure recently experienced a cybersecurity incident perpetrated by a criminal threat actor. We are actively investigating this incident with the help of outside forensics experts. We are working quickly to understand the extent of the incident and actively taking steps to minimize its impact. Maintaining your trust is our highest priority, and we are committed to transparency throughout this process. We will provide new information as it is confirmed.Steve ProudChief Information Security Officer May 1, 16:30 MDT Canvas Data 2 & Beta are available. Canvas Test Is Now Available Resolved - Resolved: Canvas Data 2 & Beta are available. Canvas Test is now available. May 6, 13:17 MDT Update - Canvas Data 2 and Beta should now be available for all customers. Canvas Test remains under maintenance.As more information becomes available we will update here. May 4, 11:11 MDT Update - Canvas Data 2 should now be available for all customers. Canvas Beta & Test remain under maintenance.As more information becomes available we will update here. May 3, 19:24 MDT Update - Canvas Data 2 should now be available for all customers. Canvas Beta & Test remain under maintenance.As more information becomes available we will update here. May 3, 16:35 MDT Update - Our team reissued certain application keys as a precautionary step, which requires end users to re-authorize access to those tools. Reissued application keys contain a timestamp in the name and will be visible to users during re-authorization. These are valid Instructure created keys and users should continue the authorization process. Please read the blog Application Key Timestamp Notice for more information. (https://community.instructure.com/en/discussion/665983/application-key-timestamp-notice)We are continuing to review the issue and will provide updates here as more information becomes available.Thank you for your patience. May 2, 12:53 MDT Update - Our investigation continues and Canvas Data 2 and Canvas Beta & Test remain under maintenance.As more information becomes available we will update here. May 1, 11:47 MDT Update - Our investigation continues and Canvas Data 2 and Canvas Beta remain under maintenance. As more information becomes available we will update here. May 1, 08:09 MDT Investigating - Some customers may be experiencing limited disruption to tools relying on API keys. Our team is actively investigating and has taken precautionary steps to help maintain service stability while we work to restore full functionality.We are continuing to review the issue and will provide updates here as more information becomes available.Thank you for your patience. Apr 30, 17:06 MDT May 5, 2026 Users utilizing Outcomes may run into errors or incorrect scores. Resolved - This incident has been resolved. May 5, 12:32 MDT Update - We are continuing to investigate this issue. May 5, 12:13 MDT Update - We are continuing to investigate this issue. May 5, 12:12 MDT Investigating - We are currently investigating this issue. May 5, 12:11 MDT May 4, 2026 Canvas: Developer Keys page does not load contents Resolved - This incident has been resolved. May 4, 21:01 MDT Investigating - We are currently investigating this issue. May 4, 20:01 MDT Some Users May Encounter