Instructure (Canvas) Cybersecurity Incident

Jackson Public Schools is continuing to monitor the cybersecurity incident involving Instructure, the company that provides Canvas.

Canvas is a widely used learning management system used by K-12 school systems, colleges, and universities across the country and around the world. This was not a breach of Jackson Public Schools’ local systems. This was a cybersecurity incident involving a third-party platform used by many educational organizations.

According to Instructure’s latest update, the incident involved unauthorized access to part of its environment. The data fields involved may include information such as usernames, email addresses, course names, enrollment information, and messages. Instructure has stated that core learning data, including course content, submissions, and credentials, was not compromised.

Instructure has also stated that Canvas is fully operational and remains safe to use. At this time, Instructure has not indicated that any additional action is required from users or organizations. JPS will continue to follow updates from Instructure and will take any additional steps recommended by the vendor, legal counsel, or appropriate cybersecurity authorities.

At this time, there is nothing families need to do in response to this message. This notification is being shared to keep you informed. It also represents all of the information Jackson Public Schools has and is able to share at this time regarding this incident. You can follow updates from Instructure here: https://www.instructure.com/incident_update.

Locally, JPS has already taken precautionary steps based on the information available. This includes reviewing and restricting Canvas administrative access to ensure that only key Instructional Technology staff have admin-level permissions.

This incident also reinforces the importance of the District’s ongoing cybersecurity improvements, including stronger multi-factor authentication requirements, tighter controls around privileged access, and improved safeguards related to removable media. These measures are part of our broader effort to reduce risk, protect district systems, and strengthen the security of student and staff information.

We will continue monitoring the situation closely and will provide additional updates if Instructure releases new organization-specific information or recommends further action for Jackson Public Schools.

Jackson Public Schools takes the privacy and security of scholar, staff, and family information seriously, and we remain committed to keeping our community informed as confirmed information becomes available.