Canvas (Instructure) Cybersecurity Incident

Forwarded Notice from HKAM (10/05/2026):

---------------------------------------------------------------
Dear eHKAM LMS Users,

 
We would like to inform you of a recently reported cybersecurity incident involving Instructure, the company that develops and operates Canvas, the platform adopted for the eHKAM Learning Management System (LMS).
 
According to Instructure, the Hong Kong Academy of Medicine is one of the affected institutions. We are counterchecking if there are any personal data of our LMS users have been compromised (which may include your name and email address, but there are no other personal data stored in Canvas). 
 
Please also be assured that your eHKAM ID remains protected. The Academy’s eHKAM login uses Single Sign-On (SSO), which means your Academy credentials are not stored within the Canvas system.
 
Please remain vigilant against phishing emails, which may be related to Canvas or eHKAM LMS. In particular:
   ?           Genuine Canvas notification emails are sent from: notifications@instructure.com
   ?           Do not click suspicious links or open unexpected attachments
   ?           Avoid entering your credentials through links in emails. When in doubt, please access Canvas directly via the official login page: eHKAM LMS Login Page
 
The Academy treats cybersecurity and the protection of user information as a top priority. We are closely monitoring the situation and shall further update you as needed.

If you need assistance, please contact us at lms.support@hkam.org.hk.
 
Thank you for your attention.

Best regards,
eLearning Team
Jockey Club Institute for Medical Education and Development

Back