Canvas availability and cyber security incident

08 May 2026

Further update

Following the updates shared this week on StaffNet and Student News regarding a cyber security incident involving the Canvas (online learning) platform, we wanted to provide a further update.

What has happened?

We have been informed by Instructure, the supplier of Canvas, that data associated with the University of Manchester has been accessed as part of this incident.

The data involved may include names, email addresses and user identification numbers of some Canvas users. Based on the information provided to date, this is not believed to include sensitive personal data such as dates of birth, financial information or passwords.

The incident has been reported to the Information Commissioner’s Office (ICO), and our Cyber Security Incident Response Team is continuing to liaise with Instructure and relevant parties to understand the full details and scope.

Is Canvas available to use?

Canvas experienced a global outage on the evening of 7 May, as a precautionary measure. Canvas is now available to use as normal for all study and business activity, and there is no requirement for users to reset their passwords at this time.

Instructure has confirmed that the incident is contained at their level, and that the system is operating under enhanced security monitoring.

As a University, we are reviewing our plans and processes to ensure we are prepared to respond swiftly if required.