Dear faculty, staff and students:

Why am I receiving this message? You may have seen recent news regarding a cybersecurity incident involving Instructure, the company that provides the Canvas learning management system used by the University of Houston.

Incidents that receive heightened public attention are frequently used by scammers to send fraudulent emails designed to appear legitimate.

 What do I need to do?

• Take extra time to review emails you are not expecting that claim to be related to the incident. These messages may appear to come from Instructure, Canvas or the university and may ask you to click links that:
  • Ask you to “verify” or “confirm” your information
  • Ask you to report the impact the incident had on you
  • Ask you to reset your Canvas or university password
  • Direct you to a fraudulent Canvas login page
• Access Canvas using UH provided links and authentication methods you used prior to this incident.
• Report any suspicious emails related to this event to UHS Information Security at https://infosec.uhsystem.edu or security@uh.edu.

Thank you for doing your part to keep our university community secure.

Sven Hahues
Asst VP/VC IT Security, CISO
UHS Information Security
University of Houston
P: (832) 842-4333
shahues@uh.edu
https://uh.edu