Cyber-incident at Instructure affecting Canvas components

Incident Report for UMass Lowell

Resolved

ALL CANVAS FUNCTIONALITY IS CURRENTLY UP AND WORKING AS EXPECTED.

However, the University of Massachusetts Lowell has been notified by Instructure that our campus was impacted by a recent cybersecurity incident affecting Instructure’s Learning Management System, Canvas.

Information impacted by the incident includes messages between users, names, email addresses, and student ID numbers, according to Instructure. Instructure has told us that they have found no indication that passwords, dates of birth, government identifiers, or financial information were involved. Please note that UMass Lowell does not store dates of birth, government identifiers, or financial information on our instance of Canvas.

Instructure has told us that there are no indicators of an ongoing threat and that it has notified law enforcement, including the FBI and the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
While the university has been told that it was impacted, Instructure has not yet provided any further specifics beyond the general categories of data described above. Instructure has committed to providing organization-specific information as quickly as possible, as well as identity protection resources for affected individuals. UMass Lowell IT will share additional information as soon as it is confirmed. Updates from Instructure are available on their status page.
Posted Apr 25, 2026 - 11:17 EDT