OC Impacted by Instructure (Canvas) Cybersecurity Incident – Information and Next Steps

On May 5, 2026, Instructure (Publishers of Canvas - Olympic College's Learning Management System) indicated that Olympic College has been impacted by a recent cybersecurity incident. Compromised information may include personal information such as full name, college email address, and ctcLink ID numbers, as well as messages. At this time, there is no indication that passwords, dates of birth, government identifiers, or financial information were involved.

OC is committed to the safety and security of our student data and is closely monitoring this situation for any impact on our community.

What is the Current State of Canvas at OC?

  • Canvas is currently down as of 1:50pm, May 7.

How This Impacts You and What to Do

  • Staff, Faculty, and Students should continue to refer to the OC Blog page for updates.
  • It is recommended to log out of Canvas on mobile and delete the apps. The apps can be reuploaded once the environment is operating normally.
  • Watch for phishing emails. Do not click links in unsolicited emails claiming to be from Canvas, Instructure, or OC IT.
  • Access Canvas directly. Always log in to Canvas using official links on Olympic.edu or by typing olympic.instructure.com directly into your web browser.

What OC is Doing

  • The IT and Instruction offices are continuing to monitor the situation and are working with Instructure to understand the impact on the college in more detail.
  • IT is monitoring communications from SBCTC regarding this incident since other colleges may be impacted.

Report anything suspicious to the IT Help Desk at @email.

Federal Trade Commission Recommendations

Members of the OC community who believe their personal information may have been compromised are advised to follow specific recommendations of the Federal Trade Commission to keep your identity as secure as possible:

Closely monitor your credit reports
You can obtain a free copy of your credit report from each of the three major credit reporting agencies: Equifax, Experian, and TransUnion.

Place a fraud alert on your accounts
A fraud alert tells creditors to contact you before opening any new accounts or before making changes to existing accounts. You can place a fraud alert by contacting one of the three credit reporting agencies. A fraud alert at one of the agencies will automatically notify the other two services.

Freeze your credit
If you believe you are the victim of identity theft, file a police report and notify the Federal Trade Commission.

Block electronic access to your Social Security information
Contact the Social Security Administration at 1-800-772-1213 to block electronic access. This will prevent anyone from being able to see or change your personal information on the internet or by the administration’s automated telephone service.

More Info