Author: David McLain

All Canvas features and services have been fully restored.

Stay alert for phishing attempts or suspicious messages referencing Canvas, including emails or Canvas messages from unfamiliar users soliciting money or asking you to click links. Report any suspicious messages or account activity to ITS through Zendesk (students) or the ITS Help Desk (employees).

The District’s ITS team has completed the steps necessary to safely re-enable Canvas access and has implemented additional security measures consistent with the State Chancellor’s Office recommendations. While all students and employees have access, some features may be restricted or limited as ITS works to restore full functionality throughout the day.  

The State Chancellor’s Office has reviewed information provided directly by Instructure and determined that Canvas does not pose an ongoing technical risk to campus platforms or student information systems. 

What you should do 

• Be alert to phishing attempts and suspicious messages referencing Canvas, including emails or Canvas messages from unfamiliar users soliciting money or asking you to click links. 

• If you have not yet reset your OneLogin password, please do so now at this link to how to reset/change your OneLogin password. 

• Report any suspicious messages or account activity to ITS through Zendesk (students) or the ITS Help Desk (employees) 

What happened 
The May 7 extortion message posted within Canvas was an escalation of an earlier incident. The threat actor exploited a vulnerability in “Free-for-Teacher” accounts to inject the message. That vulnerability has been identified and remediated by Instructure, and those accounts have been shut down. The attacker did not gain access to core Canvas functionality, and there were no changes to user data, grades, or assignment information. 

However, some user data is believed to have been exfiltrated in the earlier incident and may be misused over time. Please remain cautious. 

Where to find updates 
After all features have been fully restored, a final update will be posted to alerts.smccd.edu. For statewide information on the Canvas incident, visit the CCC Security Center. 

We expect to restore access to Canvas at some point today and will send a communication as soon as it is available. Even if Canvas appears to come back online, students and employees should not attempt to log in until you receive a District message confirming it is safe to do so. Thank you all for your patience and understanding as we manage this incident.  

Current status 

While Canvas access is beginning to be restored at some institutions, SMCCCD is following the guidance of the California Community Colleges Chancellor’s Office and the CCC Security Center to temporarily restrict access to Canvas until further notice.  

The State Chancellor’s Office has indicated it cannot provide assurances about the platform until it has received documented confirmation from Instructure that the cyber-threat has been resolved. SMCCCD will follow that guidance and communicate clearly before general access is restored later today. 

What you should do 

If you have attempted to sign into Canvas within the last 48 hours, please reset your password through OneLogin. Here is a link to how to reset/change your OneLogin password. 

For students 

Please watch for communication from the District through your school e-mail address (@my.smccd.edu) and text message. 

For faculty and staff 

Our intent is to maintain continuity of instruction and support services. The District CAT continues to actively monitor this incident and will provide updates as new information becomes available.  

Future updates 

Updates will be posted on alerts.smccd.edu and another districtwide update will be sent when access is restored. 

What happened 

Recently, a ransom message appeared within Canvas demanding that Instructure contact the threat actors or risk the release of data by May 12, 2026. This incident is not targeting any individual college. This is a targeted attack on a vendor. As a result, Canvas remains unavailable until further notice.  

What’s being done 
SMCCCD Chancellor Moreno has formed a Crisis Action Team (CAT), which includes District administration, the College Presidents, and District Academic Senate President Todd Windisch. This CAT is to provide clear, prompt communication and identify the next steps in supporting students, faculty, and staff. The State Chancellor’s Office is working directly with Instructure toward resolution. 

What you should do now 
If you have attempted to sign into Canvas within the last 24 hours, please reset your password through OneLogin. Here is a link to how to reset/change your OneLogin password. Do not attempt to log into Canvas on any platform until further notice. 

For students 
Canvas, including course materials, assignments, and gradebooks, are not available at this time. Please watch for communication from your college and your professors through your school e-mail address (@my.smccd.edu). The Colleges and the District have encouraged staff and faculty to be flexible and communicate with their students to minimize disruption. We understand many programs are in the final weeks of the spring semester.  

For faculty and staff 
Our intent is to maintain continuity of instruction and support services. The District CAT continues to actively monitor this incident.  

Future updates 
Updates will be posted on alerts.smccd.edu and another districtwide update will be sent by noon tomorrow. 

——— There are no further current alerts or notices. ——–