Instructure, the parent company of Canvas, has notified Rutgers that the university was impacted by a widespread data breach affecting thousands of institutions.
Instructure informed the Office of Information Technology that there is no indication that passwords, dates of birth, government identifiers, or financial information were involved in this incident. It is unclear what Rutgers data was involved, and Instructure’s investigation is ongoing.
Canvas is fully operational, and Canvas users do not need to take any action in connection with this incident at this time. Instructure has informed Rutgers and other impacted universities that it has taken steps to secure the platform, including remediating the underlying vulnerability. Additionally, Instructure has engaged a third-party forensics firm to investigate and has notified law enforcement authorities.
The university is actively working with Instructure to better understand the impact of the incident and will provide updates as additional information becomes available.