Canvas Outage Disrupts San Jose State Students
- San José State said Canvas was down on May 7 after a cyberattack at vendor Instructure disrupted coursework, messaging, and access during finals week. - SJSU said exposed data may include names, email addresses, student ID numbers, and Canvas messages — but not passwords or Social Security numbers. - The outage matters because Canvas is a core teaching tool, and California colleges were told to wait for safety assurances.
Canvas is the software San José State students use for basically everything that happens outside the classroom — assignments, grades, messages, lecture files, quizzes. So when it went down on Thursday, May 7, the problem was not “the website is acting weird.” The problem was that a big chunk of the semester’s machinery suddenly stopped working in the middle of finals season. SJSU tied the disruption to a cybersecurity incident at Instructure, the company behind Canvas, and warned that some university-related data may have been caught up in it. (sjsu.edu) ### What broke at San José State? SJSU told students and staff that Canvas was “down and not operational” as of May 7. That meant no normal access to course materials, assignment portals, or the messages that often become the backup channel when classes go sideways. NBC Bay Area said San José State was one of several Bay Area campuses hit, alongside schools like Stanford and Cal. (sjsu.edu) ### Why did Canvas go down? The short version is a vendor-level cyberattack. Instructure said it was dealing with unauthorized access to systems tied to Canvas, and California higher-ed security teams treated the incident seriously enough to recommend schools hold off on returning to normal use until Instructure could show the platform was safe again. That tells you this(sjsu.edu)m. (cccsecuritycenter.org) ### What data might be exposed? SJSU said the preliminary picture includes names, email addresses, student ID numbers, and user messages stored in Canvas. The university also said it could not yet confirm whether any specific SJSU person’s data was included. One important limit — SJSU said Canvas does not store passwords, Social Security numbers, financial information, or dates of birth in the affected set. (sjsu.edu) ### Was this just an SJSU issue? No — and that is the part that makes the outage feel so jarring. TechCrunch reported that the hacking group ShinyHunters claimed responsibility and said the breach touched data tied to about 8,800 schools and hundreds of millions of users, though those numbers come from the attackers and may be inflated. The New York Times said most users(sjsu.edu)gh to affect schools across the country. (techcrunch.com) ### Why does finals week make this worse? Because Canvas is not just a filing cabinet. It is the submission box, the gradebook, the study guide, and often the only place students can see deadline changes in real time. If that system disappears during finals, students cannot easily tell whether an exam moved, whe(techcrunch.com)ast, even if the platform comes back the same day. (usnews.com) ### What about the phishing warning? That part is real, and students should take it seriously. SJSU urged people to watch for suspicious messages. California Community Colleges’ security center said scammers were already sending extortion-style emails claiming they had monitored victims’ activity and demanding Bitcoin. The advice was simple — delete the message, click nothing, download nothing, reply to nobody. (sjsu.edu) ### So what should students assume right now? Assume the school is still waiting on clearer answers from Instructure, and assume any communication about deadlines may shift. The safest move is boring but effective — check official campus updates, save copies of any work you still have locally, and treat weird emails like traps. The outage itself is disruptive. The bigger(sjsu.edu)urned out to be a single point of failure. (sjsu.edu) ### Bottom line? For San José State students, this was not just a tech hiccup. A cyberattack on Canvas’ parent company knocked out a core academic system at exactly the wrong time and opened a new question behind the outage — not just when Canvas is back, but what data left with the attackers. (sjsu.edu)
