Canvas Security Incident
Incident timeline
Identified - Earlier this week, Instructure Inc. announced that it had suffered a cybersecurity incident in late April affecting Canvas. Data pertaining to students and educators at hundreds of school systems and universities around the country were subjected to unauthorized access. The breach was limited to Canvas’s internal systems. Currently, we have no indication that the security of Roanoke City Public Schools' systems and networks has been compromised. Roanoke City Public Schools takes the privacy of our students’ and employees’ information very seriously. While we have not been provided with details on which information was exposed for specific individuals, we are actively implementing additional safety measures, including temporarily removing access to Canvas, Mastery Connect (and potentially Parchment), all of which are part of Instructure’s educational software. Because this incident occurred on Canvas systems, Roanoke City Public Schools is not directly privy to the status of Canvas’s investigation and, therefore, may be unable to answer your questions. We have received assurances from Canvas that they will directly notify individuals impacted as the scope of the incident becomes known, and we are committed to holding Canvas and Instructure accountable. We will keep you informed as we learn more.