The contract with Instructure is managed by Sikt, the national service provider for the education sector. Nearly all colleges and universities in Norway use Canvas.
According to a notice on Sikt’s website, Instructure has discovered that unauthorized individuals gained access to the system (in Norwegian). It is likely that data about Norwegian students and employees in the higher education sector has been exposed. It has not been confirmed whether the attacker has leaked the data further.
The information that may be affected includes:
- Names
- Email addresses
- Student ID numbers
- Messages exchanged between users
NIH has notified the Norwegian Data Protection Authority and posted an update about the incident in Canvas.
Instructure reports that the immediate threat is now under control, but many details remain unclear. NIH will continue to share updates with staff and students as more information becomes available.
NIH asks all employees and students to be especially alert to possible fraud attempts in the coming period, as information from the breach could be misused.
If questions, contact canvas@nih.no