Canvas' Utah-based parent company responds to cyber security breach of school data SALT LAKE CITY (KUTV) — Canvas is back up and running after a nationwide cyberattack, but questions remain about how far the disruption reached. Lily Weyland, a Weber State University nursing student, said she saw a suspicious message from hackers while submitting an assignment. Weyland said she was working in Canvas when a message took over her screen for a few seconds. She said she captured a screenshot before it disappeared. MORE | Cyberattack on Canvas - Utah schools warn of scams after cyberattack on Canvas causes massive data breach - Cyberattack on Canvas potentially compromises millions of users' personal information She said the message read in part: “If any of the schools in the affected list are interested in preventing the release of their data, please consult with a cyber advisory firm and contact us privately at TOX.” Weyland said she immediately contacted Weber State’s IT department. “They answered right away, and they told me to log out of all Canvas resources and close all tabs,” Weyland said. “The message was only up for a short amount of time, but definitely an unsettling message to receive,” she said. 2News went to Instructure headquarters in Cottonwood Heights, the parent company of Canvas, to ask what the company is doing to prevent something similar from happening again. Instructure sent 2News this statement: “Yesterday, Instructure discovered the unauthorized actor involved in our ongoing security incident made changes to the pages that appeared when some students and teachers were logged in. Out of an abundance of caution, we immediately took Canvas offline to contain access and further investigate. We have confirmed that the unauthorized actor exploited an issue related to our Free-For-Teacher accounts. As a result, we have made the difficult