UPDATE: According to the provider, data from Canvas has now been secured

Last updated on 12 May 2026 at 07:51

UPDATE: On Tuesday morning, our Canvas provider, Instructure, informed us that they have entered into an agreement with the hacker group ShinyHunters. According to Instructure, this means that Canvas users can feel reassured, as the data is no longer in the hands of the hacker group.

The IBA continues to monitor the situation closely.

Our provider of the Canvas learning platform has been subjected to a cyberattack. Canvas is a learning platform used by thousands of educational institutions worldwide, including the IBA International Business Academy.

According to our provider, the data breach means that the hackers may have gained access to:

1. Your name.
2. Your private email address or any other email address you have used for Canvas.
3. Your student number.
4. Messages sent between you and your fellow students in Canvas.
5. Messages between you and your lecturers in Canvas.
6. Messages between you and the administration at the IBA in Canvas.

The data breach does not include sensitive personal information such as CPR numbers, passwords, or financial data. However, as a student, you should still remain particularly vigilant regarding phishing attacks via email. Hackers may combine information about the subjects you study with other details you have shared in messages through Canvas and use this information to contact you.

Check what you have written in messages

The IBA therefore encourages you, as a student, to log into Canvas and review what you have actually written in messages to fellow students and lecturers on the platform. By being aware of this, you will be better prepared to recognise and protect yourself against potential phishing attempts.

The provider has informed us that Canvas has now been fully secured against any further data breaches, meaning that the IBA can continue using Canvas as its learning platform. No one will be able to log in as you on the platform, as password changes are handled through the IBA’s IT department and are subject to several security procedures.

However, the IBA continues to recommend, as always, that students carefully consider what information they share on Canvas as a matter of precaution.

We are monitoring the situation closely

The IBA remains in dialogue with our provider to clarify the extent and sequence of events surrounding the incident. Unfortunately, we still do not have a complete overview of what has happened, nor do we yet know exactly what measures our supplier has taken to stop it.

The current understanding is that a ransomware or extortion group carried out the attack on our supplier and is now attempting to extort the supplier in exchange for not publishing the stolen files.

We are monitoring the situation closely and will continue to share new information as soon as it becomes available.

On Thursday, 7 May, the IBA reported the data breach to the Danish Data Protection Agency.

If you have any questions regarding the Canvas incident at the IBA, please contact Head of IT Patrick Noël Schanz on +45 72 11 82 08 or by email at pnsc@iba.dk.