Security update: Canvas Learning Management System incident

ANZSOG has been notified of a cybersecurity incident impacting the Canvas Learning Management System (LMS) used by our organisation and many other Australian, New Zealand and international education institutions. 

ANZSOG has been advised that our organisation’s information held in Canvas has been accessed without authorisation. 

We are continuing to work with our vendor Instructure to understand the full impact on our Canvas user data. 

However, based on what we know at this stage, the following information may have been accessed: 

• Student IDs 

• Names 

• Email addresses 

• Course names 

• Enrolment information 

• Messages exchanged between Canvas users within the LMS. 

Instructure has advised that Canvas remains safe to use, and that no core learning data, course content, submissions, or credentials have been compromised. 

Canvas is now back online and ANZSOG will continue to use Canvas to deliver current learning activities based on assurances from Instructure that the incident has been contained. 

ANZSOG is taking the incident seriously and is taking precautions to protect our systems and support Canvas users and staff.  

Canvas users have been contacted, and we will provide any further updates as required.