University of Sydney Faces Canvas Data Breach Affecting 9,000 Institutions
The University of Sydney says a third-party data breach involving Canvas has affected its data. The learning management system still works normally, and students and staff can keep using it while the university checks whether personal information from its community was exposed.
Canvas and University of Sydney data
Instructure, the vendor of Canvas, said University of Sydney data was impacted by a cyber security breach. The university said it is one of approximately 9,000 educational institutions worldwide that is potentially impacted, which puts this incident inside a much wider education-sector event than a single-campus outage.
The university is engaging with the vendor to determine whether any personal data from its community has been compromised. If a breach of personal data has occurred, it will notify affected individuals.
Canvas remains accessible
Canvas is operating as normal, and the university said there is no immediate action required. That means the practical change for students and staff is not a login outage or a classroom system shutdown, but a security review that could still turn into a notification if personal data was exposed.
The university also warned that incidents of this nature can increase the risk of phishing attempts. It urged people to remain vigilant, report suspicious activity, and review guidance on identifying and avoiding scams.
What affected users should watch
For now, the key issue is whether the incident reaches beyond university data and into personal records tied to the University of Sydney community. If it does, the university says it will notify affected individuals and work closely with the National Office of Cybersecurity to manage the impact of the incident.
Until then, the safest move is to treat unexpected emails, messages, and login prompts with caution, especially anything that asks for credentials or pushes a link outside the normal Canvas flow.
