May 7, 2026
Ongoing cybersecurity event affecting campus
Canvas is currently offline due to an ongoing cybersecurity incident. We are awaiting information from Instructure, the parent company of Canvas, as to when the service will be available again.
May 7, 2026, we learned of additional information regarding the original incident and are experiencing further service disruptions to Canvas. These are separate developments from the May 1 notification, and we are actively working with Instructure following our standard cybersecurity procedures to manage this incident.
View the Massmail sent to faculty, staff and students.
May 1, 2026
A nationwide security incident at Instructure, the vendor that operates Canvas, occurred on May 1, 2026. This incident impacted Canvas at thousands of institutions worldwide.
What Illinois is doing
Technology Services is actively monitoring the situation and working with the vendor, Instructure, to assess specific impacts to Illinois data.
What happened
On May 1, 2026, Instructure disclosed a cybersecurity incident that is currently under investigation. Instructure stated that the information involved consists of certain user data — including names, email addresses, student ID numbers, and messages among users. The company stated that it has found no evidence that passwords, dates of birth, government identifiers, or financial information were involved. The vendor has taken measures to protect the platform and is working with a third-party forensics firm on further investigation.
Instructure is still investigating and has not shared specific information with us regarding Illinois data included in the breach. However, neither Canvas at Illinois nor Canvas Catalog contains dates of birth, government identifiers, or financial information.
For the latest official information from Instructure, visit status.instructure.com.