CSU Monitoring Nationwide Canvas Security Incident

Colorado State University officials said Canvas remains operational while the university monitors an ongoing cybersecurity investigation involving Instructure, the parent company of the learning management platform.

Colorado State University is monitoring a nationwide IT security incident involving Instructure, the parent company of Canvas, the learning management system used by CSU and many higher education institutions across the country.

Instructure has confirmed the incident and said that core Canvas systems remain operational. The platform continues to be available and fully functional for faculty, staff, and students, according to the company.

CSU requires all vendors to meet strict IT security and data protection standards. User passwords are managed within CSU systems and are not shared with Canvas or other third-party platforms, meaning CSU passwords were not compromised in the incident.

Instructure said it has taken immediate steps to mitigate the issue and is working with external cybersecurity experts as the investigation continues. The company has not yet determined what information, if any, may have been compromised or whether members of the CSU community were affected.

CSU officials said they are actively monitoring the situation and remain in close communication with Instructure. Updates from the vendor are being posted on the Canvas status page, and the university said it will share additional information if new details become available.

Colorado State University Pueblo will continue monitoring the situation and provide updates as additional information becomes available.