Security incident involving Canvas learning management system

Faculty, staff and students:

We are aware of reports of a security incident involving our learning management system provider, Canvas. This event has reportedly impacted 8,800 educational institutions.

Instructure, Canvas’s parent company, has confirmed the incident and notified us that information from the Lawrence and Edwards campuses is involved. While the data appears to include personal information, Instructure has indicated that no passwords, dates of birth, government identifiers or financial information were involved.

This was an exposure of data within the Instructure environment. No other systems at KU were compromised, and Canvas remains available and fully functional for students and faculty. User passwords are managed within university systems and are not shared with Canvas or other third-party systems.

We will provide updates as relevant information becomes available.

Sincerely,

Ed Hudson
Vice Chancellor for Information Technology
Chief Information Officer

 

The University of Kansas prohibits discrimination on the basis of race, color, ethnicity, religion, sex, national origin, age, ancestry, disability, status as a veteran, sexual orientation, marital status, parental status, gender identity, gender expression, and genetic information in the university’s programs and activities. Retaliation is also prohibited by university policy. The following person has been designated to handle inquiries regarding the nondiscrimination policies and procedures and is the Title IX Coordinator for all KU and KUMC campuses: Associate Vice Chancellor for the Office of Civil Rights and Title IX, civilrights@ku.edu, Room 1082, Dole Human Development Center, 1000 Sunnyside Avenue, Lawrence, KS 66045, 785-864-6414, 711 TTY. Reports can be submitted by contacting the Title IX Coordinator as provided herein or online and complaints can be submitted with the Title IX Coordinator or online.

© The University of Kansas. 2025.