This article has been updated with new information. The original report can be found below the update.
Bowling Green State University (BGSU) students and faculty may use the Canvas learning management system once again, according to an email from BGSU Information Technology Services (ITS).
According to the email, which was sent to BGSU students Monday, Canvas’ parent company, Instructure, said the system is safe to use once again. ITS recommends students only enter Canvas through the MyBGSU page.
On its website, Instructure stated they have “reached an agreement with the unauthorized actor involved in this incident,” and the previously stolen information was returned to them.
“This agreement covers all impacted Instructure customers, and there is no need for individual customers to attempt to engage with the unauthorized actor,” the post on Instructure’s website stated.
Original Report from May 7, 2026:
Instructure, the company behind the Canvas learning management system used by Bowling Green State University (BGSU), was involved in a criminal cyberattack, BGSU Information Technology Services (ITS) announced in an email on Thursday night.
In the email to students and faculty, ITS stated, “At this time, please do not access Canvas or other Instructure platforms, and do not click on Canvas- or Instructure-related links in emails or messages until further notice.”
ITS added, “We understand this may be disruptive and appreciate your patience as we assess the situation. BGSU is closely monitoring updates from Instructure and will continue to share information as it becomes available, including when it is safe to access the system again. Students needing additional assistance can contact the ITS Help Desk at 419-372-0999 or via the online chat option.”
As of 10:20 p.m. on Thursday, BGSU students who attempted to log into Canvas were greeted with a page that stated, “Canvas is currently undergoing scheduled maintenance.”
Several student publications, including The Brown Daily Herald and Indiana Daily Student, published reports that earlier in the day Canvas had a black background with a message that claimed to be from the criminal hacker and extortion group ShinyHunters.
The message stated in part, “ShinyHunters has breached Instructure (again) … If any of the schools in the affected list are interested in preventing the release of their data, please consult with a cyber advisory firm and contact us privately at TOX to negotiate a settlement. You have till the end of the day by 12 May 2026 before everything is leaked.”
While classes for BGSU’s spring semester ended on May 1 and the first session of the summer semester does not start until May 18, Canvas is used by thousands of universities and K-12 school districts, many of which are still in session.
Canvas has over 30 million active users, according to the Instructure website.
