University of Nebraska incident
Instructure Security Incident & Canvas Update
University of Nebraska experienced a critical incident on May 4, 2026 affecting Canvas, lasting 16d 23h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- monitoring May 04, 2026, 02:42 PM UTC
On Friday, Instructure (the parent company of Canvas) experienced a cybersecurity incident. We are aware that the company has been working with forensics experts over the weekend to investigate the full scope of the national/global incident. At this time, the University of Nebraska has no information as to whether or not our instances of Canvas were impacted by this cybersecurity event. Our NU ITS team has not seen an increase in faculty/student issues using our instances of Canvas since the time of the incident. As we learn more about the scope of this incident from the vendor, we will be sure to keep you updated. Instructure is also periodically posting updates at https://status.instructure.com/.
- monitoring May 07, 2026, 08:22 PM UTC
We are aware that a threat actor has interrupted access to Instructure Canvas and is currently preventing some users from accessing and authenticating to the service. ITS is actively working to restore access as quickly as possible. We will provide updates as more information becomes available.
- investigating May 07, 2026, 08:36 PM UTC
We are aware that a threat actor has interrupted access to Instructure Canvas and is currently preventing some users from accessing and authenticating to the service. ITS has received confirmation from Instructure that they are aware of the problem and are actively working to resolve it.
- investigating May 07, 2026, 09:33 PM UTC
On Thursday afternoon, Canvas users around the world, including users at all four NU campuses, experienced interruptions to access. Canvas remains unavailable across the University of Nebraska. The university is in contact with Instructure, the parent company of Canvas, and will update the NU community as more information is available. For updates, visit status.nebraska.edu.
- investigating May 08, 2026, 01:36 PM UTC
While Instructure, the parent company of Canvas, has taken steps to restore access, the University of Nebraska is continuing to evaluate risk before restoring access across our campuses. The University of Nebraska will continue to share updates with our faculty, staff and students.
- monitoring May 08, 2026, 06:10 PM UTC
The University of Nebraska has restored access to several Canvas services. Canvas is now available at canvas.nebraska.edu Key integrated tools used for teaching, learning, and assessment—including Yuja, Canvas Quizzes, Turnitin, and Respondus—are now live and ready for use. Due to ongoing security precautions, the following services have not yet been restored within Canvas: Microsoft 365 Zoom Unizin Data Platform (UDP) Peoplesoft "Import Grades from Canvas" feature Instructors can find guidance on how to enter grades without this feature at canvas.nebraska.edu/gradebook. Functionality for Microsoft 365 and Zoom remains intact outside of Canvas and can still be accessed directly through their respective platforms. Some users may notice a different appearance on the Canvas login page; please be assured that it is safe to use. Students who have questions or encounter issues can contact [email protected]. Faculty may reach out to the Learning Technologies team at [email protected]. The university will continue to assess security considerations and will restore additional Canvas services as soon as it is safe to do so. We appreciate your patience, flexibility, and understanding during this time as we work to fully restore services.
- monitoring May 14, 2026, 05:18 PM UTC
Update 5/14/26 Peoplesoft Import Grades from Canvas has been re-enabled Following a security review and assessment, we are now re-enabling the option that allows instructors to import grades from Canvas to Peoplesoft (MyRed, MyBlue, MavLink, MyNCTA, MyRecords). Canvas integrations for the following services are still pending restoration: Microsoft365, Zoom, Unizin Data Platform (UDP). Functionality for Microsoft 365 and Zoom remains intact outside of Canvas and can still be accessed directly through their respective platforms.
- resolved May 21, 2026, 01:45 PM UTC
Integrated tools have now all been re-enabled in Canvas. All systems are operating normally. This issue is resolved. Updated by Rick Murch-Shafer