{"id":3490,"date":"2026-05-13T13:49:00","date_gmt":"2026-05-13T18:49:00","guid":{"rendered":"https:\/\/blogs.jccc.edu\/messenger\/?p=3490"},"modified":"2026-05-13T13:49:00","modified_gmt":"2026-05-13T18:49:00","slug":"instructure-jccc-react-to-canvas-hack","status":"publish","type":"post","link":"https:\/\/blogs.jccc.edu\/messenger\/2026\/05\/13\/instructure-jccc-react-to-canvas-hack\/","title":{"rendered":"Instructure & JCCC React To Canvas Hack"},"content":{"rendered":"

Pop-up message on Canvas log-in page.<\/strong><\/p>\n

(Photo from the Canvas log-in page)<\/em><\/strong><\/p>\n

\n

JCCC student Olivia Cramer sat down to finish an assignment due at midnight on the evening of May 7, only to find that Canvas was down. She was upset when her brother informed her that it was not functioning due to a hack.<\/p>\n

\u201cI wrote a very colorful text to my family that day,\u201d Cramer said. \u201cI was so pissed about it.\u201d The text was confirmed to be too colorful for print.<\/p>\n

On May 12, Cramer said she was still unsure if she would be able to turn in the assignment.<\/p>\n

Canvas, a learning management system by tech company Instructure, is contracted by 40% of North American higher-ed institutions<\/a> and used by tens of millions of students worldwide.<\/p>\n

With finals looming, many of these students attempted to log on, only to see a ransom note from the hacking group ShinyHunters. The note set a deadline of May 12 for Instructure to negotiate a settlement before the data of faculty and students was leaked.<\/p>\n

In a statement<\/a> published on May 11, Instructure apologized for the incident and said that they had reached an agreement with ShinyHunters.<\/p>\n

The statement explains that the company \u201creceived digital confirmation of data destruction\u201d through shred logs. Instructure claims that Canvas users would not be extorted or need to engage with the hackers.<\/p>\n

Instructure did not reveal how much was paid in ransom to the hackers.<\/p>\n

JCCC Chief Information Officer Rob Caffey and his co-workers were the primary incident response team. They became aware, by multiple channels, of an initial attack on April 29, then again on May 7 when the system was down.<\/p>\n

\u201cWe were really concerned that it was going to be offline for finals,\u201d said Caffey.<\/p>\n

Caffey said the data included names, student ID numbers and email addresses, but not passwords or federal IDs.<\/p>\n

\u201cThe team was doing what they could to address the issue and were focused on keeping students\u2019 data safe,\u201d said Caffey. \u201cWe\u2019ve got a really good team that works really hard.\u201d<\/p>\n

Despite Caffey and his team\u2019s hard work, since a third party was the target, they were mostly dependent on Instructure to resolve the issue.<\/p>\n

 <\/p>\n

Gurbhushan Singh, Associate VP of Academics, says that even though Canvas was back up and running quickly, JCCC has received reports of residual issues from students and faculty.<\/p>\n

\u201cWe are asking faculty and staff to show flexibility as we navigate these challenges together and work to end the semester positively,\u201d said Singh.<\/p>\n

With advancements in AI, ransomware and cybercrime will likely be more frequent, complex and convincing. With this in mind, Caffey recommends that students take online safety precautions seriously.<\/p>\n

\u201cWatch for fake emails about this breach,\u201d Caffey said. \u201cTurn on multi-factor authentication. Use a different password for every account. Slow down on anything \u2018urgent.\u2019 Go to the source, not the link. Don\u2019t pay extortion messages. Ask for help when you\u2019re not sure.\u201d<\/p>\n

If you have noticed any suspicious activity linked with your student account since the hack, you can contact the Technical Support Center<\/a> by phone at (913)-469-7700, email at techsupport@jccc.edu<\/a> or walk-in at RC 271.<\/p>\n","protected":false},"excerpt":{"rendered":"

JCCC student Olivia Cramer sat down to finish an assignment due at midnight on the evening of May 7, only to find that Canvas was down. She was upset when her brother informed her that it was not functioning due to a hack.\u00a0<\/p>\n","protected":false},"author":14,"featured_media":3459,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[5],"tags":[],"ppma_author":[351],"class_list":["post-3490","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"author_meta":{"display_name":"Saul Epstein","author_link":"https:\/\/blogs.jccc.edu\/messenger\/author\/sepstein\/"},"featured_img":"https:\/\/blogs.jccc.edu\/messenger\/files\/2026\/05\/Screenshot-2026-05-07-205258-300x139.png","coauthors":[{"link":"https:\/\/blogs.jccc.edu\/messenger\/author\/copper-ramberg\/","display_name":"Copper Ramberg"}],"tax_additional":{"categories":{"linked":["News<\/a>"],"unlinked":["News<\/span>"]}},"comment_count":"0","relative_dates":{"created":"Posted 4 months ago","modified":"Updated 4 months ago"},"absolute_dates":{"created":"Posted on May 13, 2026","modified":"Updated on May 13, 2026"},"absolute_dates_time":{"created":"Posted on May 13, 2026 1:49 pm","modified":"Updated on May 13, 2026 1:49 pm"},"featured_img_caption":"","series_order":"","jetpack_sharing_enabled":true,"authors":[{"term_id":351,"user_id":0,"is_guest":1,"slug":"copper-ramberg","display_name":"Copper Ramberg","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","author_category":"","first_name":"","last_name":"","user_url":"","job_title":"","description":""}],"jetpack_featured_media_url":"https:\/\/blogs.jccc.edu\/messenger\/files\/2026\/05\/Screenshot-2026-05-07-205258.png","_links":{"self":[{"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/posts\/3490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/comments?post=3490"}],"version-history":[{"count":1,"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/posts\/3490\/revisions"}],"predecessor-version":[{"id":3491,"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/posts\/3490\/revisions\/3491"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/media\/3459"}],"wp:attachment":[{"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/media?parent=3490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/categories?post=3490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/tags?post=3490"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blogs.jccc.edu\/messenger\/wp-json\/wp\/v2\/ppma_author?post=3490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}