Instructure/Canvas Data Incident

Instructure/Canvas Data Incident 
 
RPI has been notified by Instructure of a cybersecurity incident for their Canvas platform, the learning management system used for RPI at Work. The scope and extent of the cybersecurity incident remains under investigation. Instructure has confirmed that a criminal threat actor gained unauthorized access to certain user information associated with the Canvas platform, and the company is continuing to assess the full impact.
 
Preliminary findings indicate that the information involved may include names, email addresses, student identification numbers, and messages exchanged within Canvas.
 
This was not a local system breach—RPI systems remain unaffected.
 
We are actively monitoring the situation and remain in contact with the vendor. We are prepared to assess and address any potential impact to RPI students, faculty, or staff and will share updates as more information becomes available.
Out of an abundance of caution, community members should remain alert to potential phishing or suspicious communications referencing Canvas or academic activity.
 
Questions may be directed to the DotCIO Helpdesk at https://dotcio.rpi.edu/services/support-and-training/help-desk.