Canvas outage after third-party learning-platform security incident
AI-generated · every claim is source-linkedOn May 7, 2026, Skagit Valley College notified the community that Instructure reported a security incident affecting portions of Canvas, temporarily making Canvas unavailable. Follow-up notices on May 8 reported service restoration and later full restoration with vendor findings about Free-For-Teacher account vulnerabilities.
- Alerts
- 3
- Response
- —
- Killed
- 0
- Injured
- 0
Alert Sequence
3 messages in sequence · 3 verified verbatim
Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.
How the first alert is built
To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.
Skagit Valley College has been notified by Instructure, the vendor that operates the Canvas learning management system, of a recent security incident affecting portions of its platform. Based on information currently available, certain SVC user information may have been involved in the incident. At this time, there is no indication that Skagit Valley College systems, networks, or infrastructure were compromised. The incident occurred within the third-party vendor environment used to provide Canvas services to colleges and universities across the country. Canvas is currently unavailable as Instructure continues responding to the incident. We will continue to monitor and provide updates regarding platform availability and related information as additional details become available. According to information provided by Instructure, there is currently no evidence that passwords, Social Security numbers, dates of birth, financial information, or other sensitive government-issued identifiers were involved in this incident. The vendor's investigation remains ongoing, and additional information may become available as their review continues. Although the current risk appears limited, incidents of this nature may increase the likelihood of phishing attempts, ransomware-related messages, fraudulent emails, text messages, phone calls, or other scams that attempt to appear legitimate. Members of the college community may receive communications that reference Canvas, coursework, institutional business, or account activity in an attempt to create urgency or solicit personal information. We encourage all students, faculty, and staff to remain especially vigilant in the coming weeks. Please use caution when: Opening unexpected emails or attachments Clicking links requesting login credentials or personal information Responding to messages that create urgency or request sensitive information Receiving communications that appear to reference Canvas conversations, coursework, or institutional business unexpectedly Receiving suspicious messages related to ransomware, payment demands, account verification, or technology support requests Skagit Valley College will never request passwords, Social Security numbers, banking information, or multifactor authentication codes through unsolicited email, phone calls, or text messages. As a precaution, members of the college community are encouraged to: Monitor their accounts for unusual activity Use strong and unique passwords Report suspicious emails or messages to the SVC Information Technology department Avoid clicking on unfamiliar links, even if the message appears to come from a known source If you receive suspicious communications, believe you may have interacted with a fraudulent message, or have concerns related to this incident, please contact the SVC Information Technology support team at mv.help@skagit.edu for assistance. The college is actively reviewing the information provided regarding this incident and will continue coordinating with appropriate parties as necessary to better understand the scope of the event and determine whether any additional actions are warranted. We appreciate your patience and partnership as we continue to monitor this situation and provide updates as appropriate.
Sourcepresent25/25
Final assessment
Majority finds S present based on Skagit Valley College.
Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.
See all 25 individual reads
- present: Source present: Skagit Valley College appears as the issuing institution. Independent read 1.
- present: The message identifies the sender through Skagit Valley College. Independent read 2.
- present: Institutional source is clear via Skagit Valley College. Independent read 3.
- present: Sender authority is Skagit Valley College, meeting the source criterion. Independent read 4.
- present: Named organization Skagit Valley College functions as the source tag. Independent read 5.
- present: Source element satisfied by Skagit Valley College self-identification. Independent read 6.
- present: The alert is framed as an official Skagit Valley College notice. Independent read 7.
- present: Present source because Skagit Valley College is named in the body. Independent read 8.
- present: Authority wording points to Skagit Valley College as the issuer. Independent read 9.
- present: Source=1 from the Skagit Valley College naming. Independent read 10.
- present: Clear institutional authorship: Skagit Valley College. Independent read 11.
- present: The university or college name Skagit Valley College counts as source. Independent read 12.
- present: Source present through explicit Skagit Valley College language. Independent read 13.
- present: Issuing body is identifiable as Skagit Valley College. Independent read 14.
- present: Rubric source met by Skagit Valley College. Independent read 15.
- present: Self-named institution Skagit Valley College is enough for source. Independent read 16.
- present: Source coded present due to Skagit Valley College. Independent read 17.
- present: The text attributes the notice to Skagit Valley College. Independent read 18.
- present: Branded or named sender Skagit Valley College is present. Independent read 19.
- present: Source element is present via Skagit Valley College. Independent read 20.
- present: Institutional identity Skagit Valley College anchors the source. Independent read 21.
- present: Sender is established by Skagit Valley College wording. Independent read 22.
- present: Source verdict 1 based on Skagit Valley College. Independent read 23.
- present: Named campus authority Skagit Valley College satisfies source. Independent read 24.
- present: Present: Skagit Valley College identifies who is communicating. Independent read 25.
Hazardpresent25/25
Final assessment
Majority finds H present based on security incident / Canvas unavailable.
What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.
See all 25 individual reads
- present: Hazard present: security incident / Canvas unavailable is a specific threat type. Independent read 1.
- present: The text names security incident / Canvas unavailable rather than a generic emergency. Independent read 2.
- present: Specific hazard language appears as security incident / Canvas unavailable. Independent read 3.
- present: Hazard element met by security incident / Canvas unavailable. Independent read 4.
- present: Concrete threat: security incident / Canvas unavailable. Independent read 5.
- present: Hazard=1 because security incident / Canvas unavailable is specified. Independent read 6.
- present: Named hazard security incident / Canvas unavailable satisfies the rubric. Independent read 7.
- present: The causal threat is security incident / Canvas unavailable. Independent read 8.
- present: Hazard coded present from security incident / Canvas unavailable wording. Independent read 9.
- present: Present hazard via security incident / Canvas unavailable. Independent read 10.
- present: Threat type is explicit: security incident / Canvas unavailable. Independent read 11.
- present: Rubric hazard satisfied by security incident / Canvas unavailable. Independent read 12.
- present: Hazard is not vague; it is security incident / Canvas unavailable. Independent read 13.
- present: The message identifies security incident / Canvas unavailable as the hazard. Independent read 14.
- present: Specific threat security incident / Canvas unavailable is stated. Independent read 15.
- present: Hazard present through security incident / Canvas unavailable. Independent read 16.
- present: Named danger security incident / Canvas unavailable counts for hazard. Independent read 17.
- present: Hazard element is present: security incident / Canvas unavailable. Independent read 18.
- present: Clear hazard reference to security incident / Canvas unavailable. Independent read 19.
- present: The alert opens or centers on security incident / Canvas unavailable. Independent read 20.
- present: Hazard verdict 1 for security incident / Canvas unavailable. Independent read 21.
- present: Specificity of security incident / Canvas unavailable meets hazard. Independent read 22.
- present: Threat named as security incident / Canvas unavailable. Independent read 23.
- present: Hazard is security incident / Canvas unavailable, clearly stated. Independent read 24.
- present: Present: security incident / Canvas unavailable is a concrete hazard. Independent read 25.
Locationabsent0/25
Final assessment
Majority finds L absent: no physical place; Canvas platform only.
Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.
See all 25 individual reads
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 1.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 2.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 3.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 4.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 5.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 6.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 7.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 8.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 9.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 10.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 11.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 12.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 13.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 14.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 15.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 16.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 17.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 18.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 19.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 20.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 21.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 22.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 23.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 24.
- absent: Location absent: no building, campus, or place is named (no physical place; Canvas platform only). pass 25.
Guidancepresent25/25
Final assessment
Majority finds G present based on use caution, monitor accounts, report suspicious messages.
The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.
See all 25 individual reads
- present: Guidance present: use caution, monitor accounts, report suspicious messages instructs recipients. Independent read 1.
- present: Protective or operational direction: use caution, monitor accounts, report suspicious messages. Independent read 2.
- present: Action language includes use caution, monitor accounts, report suspicious messages. Independent read 3.
- present: Guidance element met by use caution, monitor accounts, report suspicious messages. Independent read 4.
- present: Recipients are told to use caution, monitor accounts, report suspicious messages. Independent read 5.
- present: Guidance=1 from use caution, monitor accounts, report suspicious messages. Independent read 6.
- present: Instructional content: use caution, monitor accounts, report suspicious messages. Independent read 7.
- present: The message directs people to use caution, monitor accounts, report suspicious messages. Independent read 8.
- present: Guidance coded present via use caution, monitor accounts, report suspicious messages. Independent read 9.
- present: Present guidance through use caution, monitor accounts, report suspicious messages. Independent read 10.
- present: Do-this language appears as use caution, monitor accounts, report suspicious messages. Independent read 11.
- present: Guidance satisfied by use caution, monitor accounts, report suspicious messages. Independent read 12.
- present: Actionable instruction: use caution, monitor accounts, report suspicious messages. Independent read 13.
- present: Guidance element is present: use caution, monitor accounts, report suspicious messages. Independent read 14.
- present: Clear instruction: use caution, monitor accounts, report suspicious messages. Independent read 15.
- present: Community told to use caution, monitor accounts, report suspicious messages. Independent read 16.
- present: Guidance present in use caution, monitor accounts, report suspicious messages. Independent read 17.
- present: Protective action use caution, monitor accounts, report suspicious messages counts. Independent read 18.
- present: The alert instructs use caution, monitor accounts, report suspicious messages. Independent read 19.
- present: Guidance verdict 1 for use caution, monitor accounts, report suspicious messages. Independent read 20.
- present: Operational order: use caution, monitor accounts, report suspicious messages. Independent read 21.
- present: Guidance is explicit via use caution, monitor accounts, report suspicious messages. Independent read 22.
- present: Instruction named: use caution, monitor accounts, report suspicious messages. Independent read 23.
- present: Guidance from use caution, monitor accounts, report suspicious messages is sufficient. Independent read 24.
- present: Present: use caution, monitor accounts, report suspicious messages is guidance to recipients. Independent read 25.
Timepresent25/25
Final assessment
Majority finds T present based on recent / currently unavailable / coming weeks.
When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.
See all 25 individual reads
- present: Time present: recent / currently unavailable / coming weeks is a temporal cue. Independent read 1.
- present: When is stated via recent / currently unavailable / coming weeks. Independent read 2.
- present: Time language includes recent / currently unavailable / coming weeks. Independent read 3.
- present: Time element met by recent / currently unavailable / coming weeks. Independent read 4.
- present: Clock or calendar cue recent / currently unavailable / coming weeks appears. Independent read 5.
- present: Time=1 from recent / currently unavailable / coming weeks. Independent read 6.
- present: Named time recent / currently unavailable / coming weeks satisfies the rubric. Independent read 7.
- present: The message times the event with recent / currently unavailable / coming weeks. Independent read 8.
- present: Time coded present using recent / currently unavailable / coming weeks. Independent read 9.
- present: Present time via recent / currently unavailable / coming weeks. Independent read 10.
- present: Temporal reference recent / currently unavailable / coming weeks is enough. Independent read 11.
- present: Time satisfied by recent / currently unavailable / coming weeks wording. Independent read 12.
- present: Schedule language: recent / currently unavailable / coming weeks. Independent read 13.
- present: Time element is present: recent / currently unavailable / coming weeks. Independent read 14.
- present: Clear when: recent / currently unavailable / coming weeks. Independent read 15.
- present: Date or hour cue recent / currently unavailable / coming weeks appears. Independent read 16.
- present: Time present through recent / currently unavailable / coming weeks. Independent read 17.
- present: Timing recent / currently unavailable / coming weeks counts for time. Independent read 18.
- present: The alert specifies recent / currently unavailable / coming weeks as when. Independent read 19.
- present: Time verdict 1 for recent / currently unavailable / coming weeks. Independent read 20.
- present: Temporal scope: recent / currently unavailable / coming weeks. Independent read 21.
- present: Time is explicit via recent / currently unavailable / coming weeks. Independent read 22.
- present: Time marker: recent / currently unavailable / coming weeks. Independent read 23.
- present: Time from recent / currently unavailable / coming weeks is sufficient. Independent read 24.
- present: Present: recent / currently unavailable / coming weeks identifies timing. Independent read 25.
Impactabsent0/25
Final assessment
Majority finds I absent: risk appears limited; no clear harm severity.
What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.
See all 25 individual reads
- absent: Impact absent: hazard is named without consequence language (risk appears limited; no clear harm severity). Independent read 1.
- absent: No severity or harm statement appears (risk appears limited; no clear harm severity). Independent read 2.
- absent: Impact=0; nothing about injury, death, or damage risk (risk appears limited; no clear harm severity). Independent read 3.
- absent: Consequence wording is missing (risk appears limited; no clear harm severity). Independent read 4.
- absent: Does not state what the hazard could do (risk appears limited; no clear harm severity). Independent read 5.
- absent: Impact not established beyond the hazard name (risk appears limited; no clear harm severity). Independent read 6.
- absent: No life-threatening or dangerous severity clause (risk appears limited; no clear harm severity). Independent read 7.
- absent: Impact coded absent: risk appears limited; no clear harm severity. Independent read 8.
- absent: Severity is not articulated (risk appears limited; no clear harm severity). Independent read 9.
- absent: People harm is not described (risk appears limited; no clear harm severity). Independent read 10.
- absent: Impact element fails: risk appears limited; no clear harm severity. Independent read 11.
- absent: No Sutton-style consequence language (risk appears limited; no clear harm severity). Independent read 12.
- absent: Impact missing in this text (risk appears limited; no clear harm severity). Independent read 13.
- absent: Without consequence phrasing, impact is 0 (risk appears limited; no clear harm severity). Independent read 14.
- absent: Impact verdict 0: risk appears limited; no clear harm severity. Independent read 15.
- absent: Hazard alone does not satisfy impact (risk appears limited; no clear harm severity). Independent read 16.
- absent: No explicit harm to people or property (risk appears limited; no clear harm severity). Independent read 17.
- absent: Impact not present (risk appears limited; no clear harm severity). Independent read 18.
- absent: Severity cue absent (risk appears limited; no clear harm severity). Independent read 19.
- absent: Consequence language not found (risk appears limited; no clear harm severity). Independent read 20.
- absent: Impact fails the rubric (risk appears limited; no clear harm severity). Independent read 21.
- absent: Does not convey potential harm (risk appears limited; no clear harm severity). Independent read 22.
- absent: Impact unsupported: risk appears limited; no clear harm severity. Independent read 23.
- absent: No impact statement (risk appears limited; no clear harm severity). Independent read 24.
- absent: Absent impact: risk appears limited; no clear harm severity. Independent read 25.
Systematic AI judgments with visible reasoning, not human-validated codings.
About this analysisBackground
Key Findings
Sources
Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.
- Official
Campus Alert Archive. "Skagit Valley College: Canvas outage after third-party learning-platform security incident." Incident of May 7, 2026. Added July 2026. https://campusalertarchive.com/case/skagit-valley-college-canvas-security-incident-outage-2026-05-07/
Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.