Canvas Service Update
Dear Students, Faculty, and Staff,
We write to provide an update regarding the recent security incident involving Canvas (see https://www.instructure.com/incident_update).
At this time, Canvas remains operational and available for use, and the Institute will continue to support its use to ensure continuity of teaching, learning, and administrative functions.
While the vendor has communicated steps it has taken to address the incident, including containment and remediation efforts, there is inherent uncertainty associated with cybersecurity events of this nature. We therefore ask all users to exercise heightened caution.
Security Alert – Phishing and Impersonation Activity
We have heard external reports of an increase in impostor websites and phishing emails attempting to exploit this situation.
Please take the following precautions:
Only access Canvas through official university links and bookmarks
Do NOT enter your credentials on unfamiliar or suspicious websites
Do NOT provide sensitive or personal information, including:Social Security numbers
Dates of birth
Passwords or multi-factor authentication (MFA) codesCaltech will never request this type of information via email or external websites.
Recommended Best PracticesAvoid uploading or storing highly sensitive or confidential information in Canvas (or other online tools) where possible.
Be cautious of unexpected emails, links, or password reset prompts.
Report suspicious activity immediately to the Information Security team.
Maintain strong password hygiene and do not reuse credentials across systems outside Caltech.
Frequently backup your data, including course scores, across all third-party educational tools.Our team continues to monitor the situation in coordination with campus leadership and trusted partners. We will provide updates as additional information is available. Visit https://www.imss.caltech.edu/news for more information.
Thank you for your vigilance and cooperation.
Sincerely,
Caltech IMSS and Caltech Canvas Support
