Tulane University experienced a software database breach, first occurring on August 10, 2025, and discovered on March 12, 2026. This incident was disclosed in May 2026 and appears to be related to a larger breach involving the Instructure (Canvas platform). The university notified consumers on April 2, 2026, and also offered one year of credit monitoring and identity protection services through Experian. This breach was confirmed by a filing with the Maine Attorney General.
The breach involved names, email addresses, and student ID numbers. According to Instructure's statement, the breach did not include passwords, birth dates, government identifiers, or financial information. The Maine Attorney General filing indicates 127 Maine residents were affected; the total number of individuals impacted across all states by the Tulane University breach has not been publicly confirmed.
Additional details about the full scope of the breach may emerge over time, and further notices may be delayed.