The following announcement was sent to students and teachers at the University of Iceland regarding a security incident in the Canvas learning management system:
"Dear students and teachers,
We would like to provide you with a further update regarding a security incident at Instructure, Canvas’ service provider.
According to the latest information, an unauthorised party has gained access to certain user data at numerous universities worldwide, including the University of Iceland. The data may include email addresses and communications between Canvas users.
It is important to emphasise that Canvas does not store user passwords or national identification numbers for the University of Iceland, and there is no indication that financial information or similarly sensitive data has been accessed by unauthorised parties.
Nevertheless, we ask you to remain vigilant regarding potential misuse of information, such as suspicious emails, messages, or requests for information that may be related to the incident.
The investigation remains ongoing, and we will monitor its progress closely. The University of Iceland will inform users as new information becomes available and if there is cause for further action.
If there is any suspicion of misuse related to an email account, please report the incident to the IT Services Division via help@hi.is.
We apologise for any inconvenience this may have caused.
On behalf of the University of Iceland,
IT Security Manager"
