Third‑Party Integration – Canvas (Instructure) Data Breach

Incident Report for Sentral

Resolved

The suspension of the Sentral ↔ Canvas (Instructure) integration has now been lifted.

For NSW Department of Education schools, the Canvas integration has been reactivated, and student data syncing has resumed as normal. Schools should refer to NSW Department of Education communications for any further guidance or required actions.

For independent schools and other customers, it is now safe to re-enable the Canvas integration by following the same steps as previously provided:

Navigate to Sentral Setup
Select Integrations
Open Canvas → Configure
Check the Auto Sync checkbox
Save

As an additional precaution, all customers (including NSW Department of Education schools and independent schools) may choose to regenerate their Canvas API key if they deem it appropriate. If assistance is required, you should contact Canvas support for guidance on regenerating API credentials.

There is no further impact, and services are operating normally.
Posted May 13, 2026 - 16:01 AEST

Identified

We are aware of a data breach incident involving our third‑party integration partner, Instructure (Canvas).

In response, the NSW Department of Education has requested that all integrations between Sentral and Canvas be suspended until further notice. As a result, student data will no longer sync from Sentral to Canvas for the duration of this suspension.

There is no impact to Sentral core services. This suspension applies only to data synchronisation with Canvas.

Other customers who wish to proactively disable their Canvas integration can do so by following the steps below:

Navigate to Sentral Setup
Select Integrations
Open Canvas → Configure
Uncheck the Auto Sync checkbox
Save

We will continue to monitor the situation closely and provide updates as more information becomes available.
Posted May 08, 2026 - 12:10 AEST