Instructure Discloses Cyber Incident, Investigates Impact
Summary
Instructure says it experienced a cybersecurity incident involving a criminal threat actor and is investigating with outside forensics experts. It has not disclosed the impact or linked maintenance of some Canvas services to the incident.
Key points
- Instructure disclosed that it recently experienced a cybersecurity incident perpetrated by a criminal threat actor.
- The company is investigating with outside forensics experts but has not described the incident's impact or affected systems or data.
- Canvas Data 2 and Canvas Beta have been under maintenance since May 1; Instructure has not said whether this is related to the incident.
- Instructure says it will provide updates as its investigation progresses.
- BleepingComputer retracted an earlier report about the incident after determining it relied on incorrect information from a prior disclosure.
Article Details
- Victim Organization
- Instructure
- Incident Type
- Cybersecurity incident perpetrated by a criminal threat actor, according to Instructure; the specific attack method was not disclosed.
- Disclosure Date
- 2026-05-01
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Instructure said it was investigating the incident with outside forensics experts and taking steps to minimize its impact. Canvas Data 2 and Canvas Beta were under maintenance beginning May 1, but Instructure did not state whether this was related to the incident.
- Ransom Or Extortion
- Not disclosed
- Claim Status
- confirmed