Canvas Updates
Southwest Technical College is aware of a data security incident involving Instructure, the provider of the Canvas learning management system. This incident has affected multiple institutions nationwide.
We are actively monitoring updates from Instructure and the Utah System of Higher Education (USHE) and will provide information here as it becomes available.
INCIDENT TIMELINE
May 1, 2026
- Southwest Technical College received initial notification from Instructure of a data security incident involving Canvas.
May 2-6, 2026
- Instructure reported that the incident involved certain user information (e.g., name, email address, student ID number, and Canvas messages).
- No evidence was reported indicating compromise of passwords, financial information, or government-issued identifiers.
- USHE began coordinating a system level response involving institutional leadership, legal, and privacy teams.
May 7, 2026 (Afternoon)
- Canvas experienced a widespread service disruption affecting logins and access to course content.
- Users were unable to access coursework or submit assignments during this period.
- Additional activity associated with the ongoing incident was reported, and the situation remained under investigation.
May 7, 2026 (Evening)
- Canvas service was restored.
- Users were able to log in, access course materials, and submit assignments.
May 8, 2026
- Canvas remains operational.
- The investigation by Instructure is ongoing.
- Southwest Technical College continues to coordinate with USHE and monitor updates.
- USHE issues an Instructure Data Incident Public Notice.
May 11, 2026
- Infrastructure released a statement saying, “We reached an agreement with the unauthorized actor involved in this incident. […] The data was returned to us, we received assurances that it will not be further shared on the dark web or elsewhere, and we received proof that any copies of that data were deleted. […] We have addressed this element of the incident directly. […] The agreement covered all of our customers, and there is no need for individual customers to attempt to engage with the unauthorized actor.”
May 12, 2026 (Current Status)
- Instructure has created a Security Incident Update & FAQs website(opens in new tab) to provide public information about this incident.
What This Means for Students and Faculty
- Canvas access has been restored.
- Students who experienced issues submitting assignments should work directly with their instructors.
- Instructors have been asked to provide flexibility and accommodate impacted students.
Security Reminder
- Be cautious of phishing emails or messages related to this incident.
- Southwest Technical College will never ask for your password via email.
- Avoid clicking suspicious links or attachments, and access Canvas only through the official website.
Ongoing Updates
This page will be updated as new information becomes available. For questions or concerns related to this incident, please contact: privacy@stech.edu.