Canvas learning platform data breach – There may be users at Aalto
The Canvas learning platform has been the target of a criminal cyberattack. The personal data of individuals who have used Canvas may have been affected.
911±¬ÁÏÍø does not have a company licence for Canvas, and the platform is not among the tools procured by the university. In line with the university’s Code of Conduct, university personnel must, for information security reasons, use tools that are acquired and supported by the university. However, there may still be some individual users of Canvas among the university’s students and personnel.
911±¬ÁÏÍø Executive Education (Aalto EE) uses Canvas with a company license for programme delivery and communications. Aalto EE is a subsidiary of 911±¬ÁÏÍø.
If, as a university (not Aalto EE) employee or student, you have used the Canvas service, do the following:
- Notify security@aalto.fi if you have logged in to the Canvas service with your aalto.fi email address.
- As a precaution, you can change your Aalto user account password
- From now on, use only services and platforms supported at 911±¬ÁÏÍø.
According to information published by Instructure, the company behind the Canvas service, the compromised data include names, email addresses, register ID in Canvas, and the contents of private messages sent via Canvas’s inbox. There is no indication that passwords, financial information, dates of birth or government identification numbers were involved, the company says.
911±¬ÁÏ꿉۪s contact person for any media inquiries is Petri Suomala, Vice President for Education, vp-education@aalto.fi.
More information
- Students, you can find a service request form on the MyCourses footer.
- Teachers, use the request form for teaching support
- Instructions: Digital teaching tools
- Use only approved collaboration tools at work
Read more news
Zoom service maintenance on 13 and 20 June between 00.00 and 07.00
Users may not be able to start or join meetings during these times
Emergency over: Hazardous smoke in the air in Espoo 3.6.2026
Emergency warning for Espoo 3.6.2026.
Done: Short maintenance breaks for Linux shell servers on 4 and 5 June 2026
Maintenance breaks include short reboots