Instructure is investigating a cybersecurity incident impacting its Canvas platform, reportedly perpetrated by a criminal threat actor. The company has not explicitly linked ongoing maintenance on services like Canvas Data 2 and Canvas Beta to the incident, but customers are warned of potential API key issues. This breach follows a pattern of attacks targeting education technology firms for their sensitive student and teacher data.
Data Security Instructure investigates cybersecurity incident impacting Canvas platform May 4, 2026 Share By SC Staff (Adobe Stock) Instructure, the company behind the widely used Canvas learning platform, has disclosed a recent cybersecurity incident and is currently investigating its impact, according to a recent report by Bleeping Computer. Instructure confirmed that a criminal threat actor perpetrated the incident and that the company is working with external forensics experts to understand the full extent of the breach. Some services, including Canvas Data 2 and Canvas Beta, have been under maintenance since May 1, with customers warned of potential issues with tools relying on API keys, though Instructure has not explicitly linked this maintenance to the security incident. Education technology firms are increasingly targeted by threat actors due to the sensitive student and teacher data they hold. This follows similar incidents involving PowerSchool, which disclosed a breach affecting 62 million students in January 2025, and Instructure's own separate breach in September 2025, which resulted from a social engineering attack on its Salesforce instance. Infinite Campus has also faced similar campaigns with claims of data theft from its Salesforce environment. Source: Bleeping Computer SC Staff Related Data Security Medicare directory exposes Social Security numbers of US healthcare providers SC Staff May 1, 2026 The database, intended to populate a Medicare directory launched by CMS as part of plans to modernize Medicare, was left publicly accessible. Malware Clandestine Deep#Door stealer facilitates long-term data compromise SC Staff May 1, 2026 Infosecurity Magazine reports that Windows systems are being stealthily targeted for protracted surveillance and credential exfiltration with the new Python-based Deep#Door backdoor framework. Malware Celebrity data leak exposes private photos and messages due to stalkerware SC Staff May 1, 2026 Cybersecurity researcher Jeremiah Fowler discovered the data, which included intimate chat logs from apps like WhatsApp, Facebook, TikTok, and Instagram. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Block Cipher Checksum Ciphertext Data Aggregation Decryption Diffie-Hellman Digital Envelope Digital Signature Digital Signature Algorithm (DSA) Digital Signature Standard (DSS) You can skip this ad in 5 seconds