July 6
Update on Canvas Security Incident
On April 26, 2026, a malicious actor obtained unauthorized access to certain myCanvas accounts hosted on Instructure inc. (‘‘Instructure’’), including myCanvas accounts belonging to Mohawk College (‘‘Mohawk’’). This activity was subsequently identified as part of a ransomware incident impacting Instructure. On or around May 2, 2026, Instructure notified Mohawk of the Incident. Mohawk subsequently commenced its own internal response with the assistance of third party cybersecurity specialists.
On or around May 12, 2026, Instructure advised Mohawk that it reached an agreement with the unauthorized party, resulting in the return of the data, assurances it will not be shared, and evidence that copies have been deleted. At the time of this update, there is no evidence that the data has been posted online. That said, we are issuing this notice as a precautionary measure, so that students and staff may consider taking the appropriate preventive measures.
What Information Was Involved? Personal information that has been identified in the myCanvas accounts may include any combination of the following: name, email addresses, institutional/student identifications, user-generated content, including messages.
What We Are Doing. We take this event and the security of information in our care very seriously. Upon discovery of this event, we immediately began an exhaustive investigation to determine its nature and scope. As part of our ongoing commitment to the confidentiality of the information, we are also working to put in place additional security measures to further protect against the risk of a similar event occurring in the future. We have also reported this event to the appropriate regulatory authorities, including the Office of the Information and Privacy Commissioner of Ontario (‘‘IPC’’).
Please note that you are entitled to make a complaint to the IPC. The complaint must be made in writing and filed with the IPC by no later than May 2027. The mailing address for the IPC is: 2 Bloor Street East, Suite 1400 Toronto, ON, M4W 1A8.
What You Can Do. While we have no indication of fraud or identity theft as a result of this event, we encourage you to remain vigilant for phishing or suspicious messages, not click unfamiliar links or share personal information. We invite you to report any concerns to the IT Service Desk.
For More Information. We understand that you may have questions about this event that are not addressed in this notice. If you have any further questions or require assistance, please contact us at mohawkcommunications [at] mohawkcollege.ca (mohawkcommunications[at]mohawkcollege[dot]ca).
May 22, 2026
Update on Canvas Security Incident
Mohawk College continues to monitor the global cybersecurity incident involving Instructure, the provider of MyCanvas.
Instructure has advised it reached an agreement with the unauthorized party, resulting in the return of the data, assurances it will not be shared, and evidence that copies have been deleted. At the time of this update, there is no evidence that the data has been posted online. This provides additional reassurance; however, situations involving unauthorized third parties carry inherent uncertainty, and the Mohawk community should continue to remain vigilant.
Current Status
MyCanvas is fully operational and safe to use
No action is required from students or employees
Precautionary Guidance
- Remain vigilant for phishing or suspicious messages
- Do not click unfamiliar links or share personal information
- Report concerns to the IT Service Desk
The college will continue to monitor the situation and provide updates if warranted.
May 12, 2026
Instructure has advised that it has reached an agreement with the unauthorized party, resulting in the return of the data, assurances that it will not be shared, and evidence that any copies have been deleted. While situations involving cybercriminals can never be guaranteed, this development provides some reassurance.
At this time, no action is required. However, we strongly encourage you to remain vigilant for phishing emails or suspicious messages. Be cautious of unexpected requests for personal information and avoid clicking unfamiliar links.
We will continue to monitor the situation and provide updates as needed.
May 8, 2026
Update: MyCanvas Learning System Back Online
Mohawk College’s MyCanvas learning system is back online and is safe for use by students faculty and staff.
The college continues to monitor the situation with MyCanvas provider Instructure and will provide updates as more information becomes available.
May 7, 2026
MyCanvas Learning System Offline
Mohawk College’s MyCanvas learning system is unavailable until further notice.
Students who have concerns about assignments, assessments, or course-related deadlines are encouraged to contact their program coordinator directly for support and guidance. Faculty and staff are aware of the outage and will adjust their teaching plans accordingly. No assignments are due during the outage.
This outage affects the MyCanvas learning system only. No other college systems are affected. The college continues to monitor the situation closely and will provide updates as more information becomes available.
May 6, 2026
Important IT Notice: Third‑Party Incident Affecting MyCanvas
Mohawk College is aware of a global cybersecurity incident involving Instructure, the provider of the MyCanvas learning system.
At this time, there is no required action for students or employees. Passwords and login credentials were not affected, and there is no indication that financial or highly sensitive personal information was involved.
Users are encouraged to remain vigilant for phishing emails and report any suspicious messages.
The college continues to monitor the situation and will share updates if needed.
