What happened? 

In a hack targeting the Canvas learning platform, data from 44 Dutch educational institutions was stolen and Canvas was taken offline. Worldwide, the data of roughly 275 million users may be involved. The attack has been claimed by the hackers’ collective ShinyHunters, which was also behind this year’s cyberattack on Odido.

Canvas’s provider (Instructure) has confirmed that the UvA has also been affected. We are currently assessing the extent.

Can I continue to use Canvas? 

No. At the moment (Friday, 8 May), Canvas is not available at the UvA. Check this page for updates on how teaching will proceed. We are awaiting additional assurances from Instructure to ensure the system can be safely brought back online.

Who has been affected? 

Students, staff and support staff. The scope and which data may have been leaked are not yet clear; we are investigating this.

What data has been leaked? 

Based on the information currently available, this is not yet clear for the UvA. 

What can or should I do myself? 

• As a precaution, change the passwords of any other applications where you use the same password. You can read here what makes a strong password. 
• It’s important to stay alert to phishing emails. If your email address is part of the data breach, the likelihood of receiving such messages may increase. 
• Keep an eye on this page for the latest updates about teaching. The UvA is closely monitoring the situation and will update this page as soon as there is more news.

What are the consequences for teaching? 

The UvA is doing everything possible to ensure that teaching and assessment can continue. Scheduled teaching and examinations are going ahead today (Friday, 8 May).

Is my test or class going ahead today (Friday, 8 May)? 

Yes. All scheduled tests and timetabled teaching are going ahead today (Friday, 8 May). 

How can I prepare for my exam(s)? 

Faculties are working on alternatives to make study materials available to students who have exams in the coming days. Your degree programme will inform the relevant students.

Do I still need to submit my assignment? 

Lecturers have been asked to be flexible about deadlines where needed. Contact your lecturer to discuss the options. You can find your lecturers’ contact details in the Course Catalogue. 

What should I do if there appears to be phishing or fraud? 

Read more about the different forms of fraud or phishing and what action you should take yourself.

Where can I find the latest news about this incident? 

Keep an eye on this page for the latest updates about teaching. The UvA ismonitoring the situation closely and will update this page as soon as there is more news. 

For more technical updates on using Canvas, see services.uva.nl. 

Will the cyberattack affect the student council elections starting on 11 May? 

No. The voting system operates independently of Canvas.

Where can I ask questions? 

You can contact the Education Desk of your own degree programme.