Today, the Government of the Northwest Territories (GNWT) notified Canvas learning management platform users of a security incident involving Instructure,  Canvas’ parent company.

On May 5, the GNWT was informed that Instructure had experienced a cybersecurity incident which led to unauthorized access of some information associated with Canvas accounts. Immediately, departments began working with the Office of the Chief Information Officer and departmental incident handlers to assess the scope of the breach and ensure appropriate mitigation measures were in place. The Information and Privacy Commissioner of the Northwest Territories was also notified.

Compromised information may include names, email addresses, and enrollment or professional development training information. No passwords were accessed or compromised. The GNWT Canvas learning management system does not contain financial or other sensitive personal information, as this type of data is not collected or stored within the system  

Approximately 1,700 people may have been affected. This includes NWT teachers, education staff, GNWT employees, contractors, and program participants who use the platform. The affected GNWT departments include Education, Culture and Employment, Infrastructure, and Industry, Tourism and Investment.

Affected users are encouraged to:

• Remain vigilant against phishing attempts or suspicious emails
• Be cautious of unsolicited emails or messages
• Avoid clicking unexpected links or attachments
• Verify requests for sensitive information independently
• Update passwords if the same credentials are used across multiple platforms.

Instructure’s investigation remains ongoing, and the GNWT continues to monitor the situation. For the latest information, please visit: Security Incident Update & FAQs | Instructure.

For media requests, please contact:
Agata Gutkowska
Manager, Public Affairs and Communications
Department of Education, Culture and Employment
Government of the Northwest Territories 
agata_gutkowska@gov.nt.ca