Nationwide Canvas Cybersecurity Incident | News Details

Nationwide Canvas Cybersecurity Incident | News Details

Nationwide Canvas Cybersecurity Incident | News Details

https://www.bsd405.org/about-us/news/news-details/~board/bsd-news/post/nationwide-canvas-cybersecurity-incident

Publish Date: 2026-05-13 14:00:00

Source Domain: www.bsd405.org

Author:

Using an unordered list, summarize the following article with between 4 and 8 key points.
We are providing information about a recently reported nationwide cybersecurity incident involving Instructure, the company that operates the Canvas learning management system (LMS). Canvas is used by many school districts and colleges across Washington and the country to support student access to coursework and assignments.Instructure has notified districts and universities that they experienced unauthorized access to certain Canvas data. According to the company, the incident was identified and contained in late April, and they have engaged outside forensic experts and federal law enforcement to investigate.This incident is limited to Canvas operated by Instructure and does not involve any BSD-managed systems or networks. Bellevue Digital Discovery uses Canvas for four CTE classes, and Canvas is also used by two high school Data Science classes in partnership with the University of Washington.

Current Status 

In a recent update to BSD, Instructure CEO Steve Daly shared that the company, “reached an agreement with the unauthorized actor involved in this incident. As part of that agreement, the data was returned to us (Canvas), we received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any copies of that data were deleted. Further, we have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise. While there is never complete certainty when dealing with cyber criminals, we believe it was important to take every step within our control to give our customers additional peace of mind, to the extent possible.”

Actions We Have Taken 

Out of an abundance of caution, the district has initiated forced password changes for all active staff and students who use Canvas. We will also discontinue the use of Canvas this summer.As a precaution, we encourage staff, students, and families to remain alert to suspicious emails, phishing attempts, or unexpected requests for personal information.We are in active communication with Instructure and will continue to share updates as additional information becomes available. You can access information from Instructure directly on their Security Incident Update & FAQs webpage. If you have questions, please contact:James LukeDirector of Cyber [email protected]‑456‑4684