NEWS
The Canvas learning platform, which has been closed since Friday due to an IT attack, will reopen on Monday at 13:00. The supplier assures that the system is safe to use.
Umeå University decided to close Canvas to all users from Friday onwards for security reasons. The Canvas supplier, Instructure, has issued a statement assuring that the system is safe to use.
The University has closely monitored developments and can confirm on Monday that there are no indications of any new attacks from the perpetrators over the weekend.
As Canvas is a highly business‑critical system used by teachers and students to deliver teaching, Umeå University will reopen access to the system on Monday at 13:00.
“Our assessment is that users can use the system as normal. However, we continue to monitor the situation closely. We know that the attackers are still exerting some pressure on the supplier, so we all need to remain very vigilant for some time to come,” says Therese Strandberg, Head of the Unit for IT Support and Systems Development (ITS) at Umeå University.
The supplier can confirm that the attackers have gained access to some personal data stored in Canvas. It is still unclear exactly which data is involved, but it is likely that the attackers have obtained names, email addresses, messages sent within the system and student ID numbers, which in the case of Umeå University also include personal identity numbers, as well as employees’ personal identity numbers.
“This provides further reason to remind all Canvas users to be alert to so‑called phishing. Any unusual messages or requests to disclose personal data should be avoided and reported,” says Therese Strandberg.
At present, there are no indications that the attackers have leaked this data to third parties.
