Summary

• Instructure reported a May 1 cybersecurity incident involving its Canvas learning-management platform.
• Canvas access was disrupted across multiple institutions, including all 23 California State University campuses and the Chancellor's Office.
• Potentially at-risk data included names, email addresses, student and faculty ID numbers, rosters, and Canvas messages.
• Instructure said it had found no evidence that passwords, financial information, birth dates, or government identifiers were involved at the time of its report.
• ShinyHunters claimed responsibility and threatened to release data unless Instructure or affected institutions negotiated a settlement; those claims were not independently verified in the supplied material.
• Some institutions restored access while others continued investigating, warning users against suspicious login pages and phishing messages.
• Colleges began planning emergency instructional procedures and other measures for future Canvas disruptions.