Information Regarding a Security Incident at Canvas
We would like to inform you about a cyberattack affecting our service provider Instructure Inc., the operator of the Canvas learning platform, and share the information currently available to us.
Instructure informed us that an external attacker gained unauthorised access to systems on the Canvas platform in early May 2026. The incident potentially affects all institutions worldwide that use Canvas. This week, we were informed that personal data belonging to Frankfurt School Canvas users has also been affected.
Based on the information currently available, all individuals who use or have used a Frankfurt School Canvas account are affected, including students, customers and employees of Frankfurt School.
Based on our current information, the data affected primarily includes user account and administrative data. In addition, Instructure has confirmed that messages exchanged between users in Canvas are also affected. It is not yet conclusively known which specific message content has been affected.
Based on our current understanding, no passwords, dates of birth, government-issued identification numbers or financial data have been affected.
Furthermore, we currently have no confirmed indications of any specific misuse of data belonging to Frankfurt School Canvas users.
Together with Canvas, we are continuing to investigate the matter.
As soon as we became aware of the incident, we immediately involved our internal information security, data protection and legal teams and informed the relevant supervisory authority.
Instructure has remedied the underlying vulnerability and, together with us and external experts, implemented the necessary technical and organisational measures to ensure that Canvas can now be used securely at Frankfurt School.
If you have any questions about this incident, the Frankfurt School Data Protection Team—Justin Lehmann, Data Protection Coordinator, and Tilman Spriegel, Data Protection Officer—is available to assist you: LMS-Vorfall@fs.de
We will actively inform you as soon as further information becomes available.
