2026-05-19
Watch out for phishing following the Canvas incident
Following the security incident on Canvas, students at Jönköping University are urged to be particularly vigilant regarding suspicious messages.
The incident is still being monitored and is not currently affecting the system’s operation. However, it is common for cyber attackers to exploit such incidents to spread fake emails and messages (phishing).
What is phishing?
Phishing involves attempts to trick the recipient into disclosing sensitive information, such as passwords or personal details, by pretending to be a trusted sender, such as JU, Canvas or a teacher.
Be vigilant towards:
- Urgent messages – like “Your account will be suspended”, “Please confirm your details immediately”
- Suspicious links – always check the web address carefully – minor spelling mistakes are common
- Unusual senders – the email appears to come from JU but is sent from an external address
- Language – spelling mistakes or unusual language can be a warning sign
- Request for information via a link – JU does not normally ask for login details or personal data via email
Please take extra care…
- Regarding emails relating to the ongoing Canvas incident
- If no request has been initiated (e.g. password reset)
- If something seems off, even if the email appears genuine
If you're unsure
- Do not click on links or attachments
- Log in via your bookmarks or ju.se
- Contact IT Helpdesk



