Canvas Security Incident

Instructure, the company that provides Canvas, has confirmed a cybersecurity incident perpetrated by a criminal threat actor. Idaho State University’s Information Technology team (ITS) and the Instructional Technology Resource Center (ITRC) are actively monitoring the situation and will communicate updates through official channels as new information is confirmed. In the meantime, members of the university community should be cautious of attackers who may attempt to take advantage of this incident.

Note: Full Canvas access is now available to faculty and students.

Request ITS assistance

Q: What happened?

• On May 7, 2026, Canvas experienced a nationwide cybersecurity incident. Instructure, the company that provides Canvas, has confirmed a cyber attack perpetrated by a criminal threat actor, affecting access for students and faculty at many institutions, including Idaho State University.
• Note: ISU Final Exams After 12 p.m. on Thursday, May 7, 2026 have been canceled.
  • All final exams scheduled after 12 p.m. (noon) on Thursday, May 7, 2026, have been canceled and will not be rescheduled or counted toward final grades.

ITS is tracking this incident closely and will notify the university community of any updates.

Q: What should I do?

• Security incidents like this are frequently exploited by attackers who send phishing emails impersonating Canvas, Instructure, or university ITS staff. Be alert for messages or alerts that:
  • Ask you to re-verify your Canvas login or university credentials
  • Claim your account has been compromised and prompt you to click a link
  • Request urgent account actions from addresses that resemble, but are not, official university or Instructure domains
  • Include unexpected password reset requests you did not initiate
  • Ask you to Accept any Duo requests if you are not logging in

Note: If you are ever unsure whether a message is legitimate, do not click any links. Contact the ITS team before taking any action. ITS will never ask for your password via email.

Q: How do I report a suspicious message?

• If you receive an email that appears to be related to this incident or looks suspicious, report it immediately to the ITS help desk.
• Note: If you are ever unsure whether a message is spam or a malicious phish, you can always report it to ITS for analysis.

Q: Where can I find official updates?

• Only trust communications from the following official sources regarding this incident:
  • Announcements posted inside our official ISU Canvas Site (external link) and our ISU Continuing Education Canvas Site (external link) (look for system-wide notices at the top of your Dashboard)
  • Emails sent from ITS using official @isu.edu addresses or isu@email.getrave.com.
  • The Instructure status page (external link)
  • The Instructure Security Incident update page (external link)

Q: Is Canvas still available?

• Canvas is now fully back online. 

Q: As a faculty member, what should I know about finals and grades?

• This article, Guidance for Canvas Cybersecurity Incident (external link) should answer most finals and grades related questions.

Q: Who can I contact if I have questions or concerns about exams, assignments, projects or grades?

• Students should direct questions to the course instructor. Students can find contact information for faculty in the ISU Directory (external link). Students unable to find instructor contact information may contact the chair of the department.
  
  Faculty and students with additional questions or concerns should contact department chairs and college deans.