1
Published signals
currently linked to this company
Company intelligence
Qualtrics cybersecurity incidents and threat signals
qualtrics.com
Qualtrics provides experience-management software that organisations use to collect and analyse customer, employee, product and brand feedback.
1
Last 28 days
recent published signals
1
Last 90 days
recent published signals
1
High or critical
confidence classifications
July 16, 2026
Latest report
most recent published signal
Explore related intelligence
Explore this reporting from another angle
Based on all published signals currently linked to Qualtrics. Affected countries come from victim data; the company country above remains a separate profile fact. Counts describe this reporting set, not overall incident prevalence.
Confirmed impacts
Company signals
All published signals involving Qualtrics
Qualtrics users impacted by Canvas (Instructure) nationwide data breach
A widespread security incident affecting Canvas, a learning management system by Instructure, impacted thousands of institutions, including Rutgers University, which utilizes the Qualtrics survey tool. Instructure notified Rutgers that while there was no indication of passwords, dates of birth, government identifiers, or financial information being involved, the specific Rutgers data compromised remains unclear. Instructure reportedly reached an agreement with the unauthorized threat actor, and the stolen data was returned and destroyed. Canvas remained operational throughout the incident.
FAQ
Questions about Qualtrics cybersecurity reporting
What does the Qualtrics page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Qualtrics.
Does every mention of Qualtrics appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.