Instructure, the company that owns and operates the Canvas learning management system, has confirmed a cybersecurity incident on their systems affecting some Canvas user information.

Canvas is used by universities globally, including UniSC, and on 6 May, Instructure confirmed that we are one of the many universities worldwide that have been impacted.

Latest update

Posted 11.50am, Wednesday 13 May 2026

Instructure, the owner and operator of Canvas, has advised impacted organisations, including UniSC, that it has reached an agreement with the  threat actor involved in this incident.  

Instructure has also advised that, as part of the agreement, any impacted data was returned to them and would not be shared. 

Canvas is now fully operational at UniSC, with additional security measures in place.  

UniSC continues to work closely with the National Office of Cyber Security  (NOCS), which is  coordinating the national response to this incident.  

NOCS has cautioned that threat actors cannot be trusted and, while there is currently no evidence that any impacted data has been shared externally, UniSC staff and students should remain vigilant for phishing emails or scam messages.  

How can I take precautions?  

• Treat unexpected Canvas-related emails with caution, even if they appear legitimate. Do not click links or open attachments in unsolicited emails relating to Canvas or this incident.  
• If you need to access Canvas or another University system, type the web address directly into your browser or use your usual saved bookmark.  
• Be cautious of requests for passwords, personal information, payments or multi-factor authentication approvals.  
• If a message seems unusual or unexpected, verify it through a known and trusted communication channel before taking any action.  
• When in doubt, contact UniSC directly or seek advice from the IT Service Desk.
• You can also learn how to protect yourself from scams by visiting ScamWatch.

Students should monitor their student email for updates and check the student portal.
Updates for staff will be posted on MyUniSC.