Instructure Breach Notice

Body

Instructure Breach Notice

On May 1st, 2026, Saint Johns River State College received a notice from Instructure / Canvas of a cybersecurity event. Below is a summary of that notice:

"Instructure recently experienced a cybersecurity incident perpetrated by a criminal threat actor. We are actively investigating this incident with the help of outside forensics experts. We are working quickly to understand the extent of the incident and actively taking steps to minimize its impact. Maintaining your trust is our highest priority, and we are committed to transparency throughout this process. We will provide new information as it is confirmed."

Since the initial disclosure by Instructure on May 1st, more information has become available. Please link to the following for the latest information from Instructure:

Instructure Incident Update

SJR State Summary:

SJR State is aware of recent cybersecurity incidents involving the Instructure/Canvas platform used by colleges and universities across the country.

At this time, there is no indication that SJR State systems were breached. However, Instructure has reported unauthorized access to their hosted platforms involving some user information. Canvas has notified the College that SJR State-related data may have been involved, and the overall scope is still being investigated.

Information potentially exposed may include things like names, email addresses, and limited account-related information. There is no evidence at this time that passwords, financial information, nor government-issued identifiers such as SSN or driver's licenses were compromised. SJR State does not share this information with Canvas, so it was not there to be compromised. Because information from incidents like this can sometimes be used in phishing scams or fake messages, we encourage everyone to stay alert:

  • Be careful with unexpected emails, texts, or phone calls
  • Don’t click suspicious links or attachments
  • Never share your password or MFA codes
  • Use strong, unique passwords whenever possible

More details about these incidents, along with future updates, will be posted here.

Details

Details

Article ID: 161997
Created
Mon 5/11/26 10:59 AM
Modified
Mon 5/11/26 2:32 PM