The Office of Innovative Technologies (OIT) is aware of a nationwide cybersecurity incident involving Canvas, the University of Tennessee, Knoxville’s learning management system. We are actively monitoring updates from Instructure, Canvas’ parent company, and assessing any impact on university services.

Please note that Canvas is available and operational to faculty, staff, and students.

About the Incident

This is a vendor-driven, nationwide event affecting multiple institutions. 

Instructure took immediate action, contacted the authorities, and engaged a leading third-party forensics firm to support the investigation.

About the Data Breach

The University of Tennessee, Knoxville, has been notified of a data breach associated with some accounts.  

Instructure has shared that while its investigation remains ongoing with the assistance of outside forensic experts, our organization has been impacted. Based on what Instructure has found to date, the data involved appears to include personal information. At this time, Instructure has found no indication that passwords, dates of birth, government identifiers, or financial information were involved, and the university does not store this information in Canvas.

OIT will reach out if you need to take any action related to this incident. 

Action Items

You do not need to take any action aside from continuing to remain diligent about cybersecurity protections, including

• Be on the lookout for phishy emails and follow OIT’s online instructions to learn how to spot a scam and report it to OIT.
• Access Canvas, MyUTK, UT Microsoft 365, UT Google, and other university websites directly. 
  Avoid opening links and attachments from unknown senders. Do not open attachments unless you are expecting a file from someone. Give them a call if you are suspicious.

Additional Information

Updates from Instructure are available on their status page. 

OIT will continue to monitor the situation and will provide updates as new information emerges.