National Cybersecurity Center
Advisory Alert

Instructure, Parent Company of Canvas, Confirms Data Breach

Instructure, the parent company of Canvas, says some data was stolen in a cyberattack. Canvas is widely used by schools, students, and educators.


Who Is at Risk

Students, teachers, and anyone whose information was stored by Instructure may be affected.

What to Watch For

Watch for unexpected emails or messages asking you to reset passwords, confirm account details, or share personal information.

What to Do

Change your password right away if you use Instructure services, and turn on extra sign-in protection if it is available.

Stay Protected

Sign up for free alerts and get connected to Merena, your personal cyber advisor, today.

By continuing, you agree to receive NCC email alerts and related guidance. Unsubscribe anytime. See our Privacy Policy.