Notice to Parents and Guardians Regarding Canvas Cybersecurity Incident
Dear Parents and Guardians,
Rossville Consolidated School District is committed to protecting the privacy and security of student and staff information. We are writing to inform you about a recent cybersecurity incident involving Instructure, the provider of the Canvas learning management system used by our district.
According to information provided by Instructure, on April 25, 2026, Canvas experienced a cybersecurity incident involving unauthorized access by a criminal threat actor. The activity was detected on April 29, 2026, and the company immediately revoked the unauthorized access and initiated a comprehensive investigation, with assistance from outside forensic experts and law enforcement agencies, including the FBI and the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
Based on the investigation to date, some data associated with school accounts may have been accessed. The information potentially involved may include certain personal information stored within Canvas. At this time, Instructure has stated there is no indication that passwords, dates of birth, Social Security numbers, government-issued identification numbers, or financial information were compromised.
Instructure has reported that they have:

• Disabled compromised accounts and revoked associated access
• Addressed the identified vulnerability
• Implemented additional platform-wide security protections
• Increased monitoring and detection controls
• Engaged leading cybersecurity forensic experts to support the investigation

At this time, Canvas remains operational, and there is no indication of an ongoing threat to the system.
While we continue to work with Instructure to understand better the scope of the incident and whether any district-specific information was impacted, we encourage families to remain vigilant about online account security and digital communications.
As a precaution, we recommend:

• Monitoring accounts for unusual activity
• Using strong, unique passwords for online services
• Enabling multi-factor authentication whenever available
• Remaining cautious of suspicious emails or messages requesting personal information

Rossville Consolidated School District takes data privacy and cybersecurity seriously. We understand the importance of the trust families place in us, and we will continue to provide updates as additional verified information becomes available.
If you have any questions or concerns, please contact the Rossville Consolidated School District administrative office.
Sincerely,
Dr. Jim Hanna
Superintendent