UBC experienced a notice incident on May 8, 2026 affecting Canvas, lasting 11d 22h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating May 07, 2026, 08:57 PM UTC
Canvas is unavailable due to a cyber breach of its parent company Instructure. UBC community members should not log into Canvas until further notice. If you are logged in, please log out immediately and do not log back in until you are notified by UBC IT that is safe to do so. If you have logged in after 12 p.m. PT on Thursday, May 7, please change your CWL password immediately and reach out to [email protected]. We will provide more updates as soon as we have them.
- investigating May 08, 2026, 02:08 AM UTC
.
- investigating May 08, 2026, 02:08 AM UTC
The university is working to maintain learning continuity for courses starting next week and will be contacting affected community members in the coming days. We also recommend that faculty, staff, and students continue to be vigilant against phishing and follow best practices for protecting their accounts and data, including using strong passwords and enabling multi-factor authentication where available. We will provide more updates as soon as we have them.
- investigating May 08, 2026, 08:05 PM UTC
The university is working to maintain learning continuity for courses starting next week and will be contacting affected community members in the coming days. As a precautionary measure, we are now advising UBC community members who use Canvas to take the following steps: - Do not attempt to log into Canvas or Canvas Catalog until UBC IT advises that it is safe to do so; and - If you logged into Canvas or Canvas Catalog after 12 p.m. PT on Thursday, May 7, please change your CWL password immediately and contact UBC Cybersecurity at [email protected]. Community members can change their CWL password here: https://www.myaccount.ubc.ca/myAccount/. While Instructure has made the Canvas service available, UBC needs to review security measures prior to providing access for the UBC community. We also recommend that faculty, staff, and students continue to be vigilant against phishing and follow best practices for protecting their accounts and data, including using strong passwords and enabling multi-factor authentication where available.
- investigating May 11, 2026, 09:36 PM UTC
While Instructure has made the Canvas service available again, UBC continues to review prior to providing access for the UBC community. The university is working to maintain learning continuity for courses already underway as well as those starting later this week and will be contacting affected community members in the coming days regarding these courses. Students and instructors can find course information and resources, while Canvas is unavailable: https://ltic.ubc.ca/canvas-redirect/. Students, please check your email from UBC regularly, as your instructor or department may contact you directly with updates or instructions. We also recommend that faculty, staff, and students continue to be vigilant against phishing and follow best practices for protecting their accounts and data, including using strong passwords and enabling multi-factor authentication where available.
- investigating May 12, 2026, 05:14 PM UTC
We are continuing to investigate this issue.
- monitoring May 15, 2026, 04:51 AM UTC
This morning, UBC received information from Instructure related to the mitigations and remediations Instructure have taken to address the Canvas cybersecurity incident. Based on this new information, UBC has made the decision to work with Instructure to restore access to Canvas and Canvas Catalog for the UBC community. Faculty who are currently teaching will be contacted with details about when Canvas access is expected to be restored. We recognize the disruption this incident has caused for teaching, learning, and university operations, and we appreciate our community’s continued patience. We recommend that faculty, staff, and students continue to be vigilant against phishing and follow best practices for protecting their accounts and data, including using passphrases or strong passwords and enabling multi-factor authentication where available.
- monitoring May 15, 2026, 10:45 PM UTC
We are continuing to monitor for any further issues.
- monitoring May 15, 2026, 10:46 PM UTC
May 15, 2026 15:45 PT Canvas and Canvas Catalog are fully operational and are available for students, staff, and faculty
- resolved May 20, 2026, 12:42 AM UTC
Canvas now operational - Resolved You can now log in to Canvas and Canvas Catalog. UBC has worked with Instructure to restore access to Canvas and Canvas Catalog for the UBC community. Please note while access has been restored to Canvas, some functionality within Canvas will take longer to fully recover. Students should continue to check their email regularly as instructors or departments may contact them directly with updates and instructions. Faculty and instructors: More information is available on the LT Hub page for instructors. Students: More information is available on the LT Hub page for students. We recognize the disruption this incident has caused for teaching, learning, and university operations. Instructure has advised that all data affected by the incident was returned and Instructure received digital confirmation of data destruction by the unauthorized actor. More information is provided by Instructure here: https://www.instructure.com/incident_update We recommend that students, faculty, and staff continue to be vigilant against phishing and follow best practices for protecting their accounts and data, including using passphrases or strong passwords and enabling multi-factor authentication where available. Community members can change their CWL password on the CWL myAccount Webpage.