{"id":305323,"date":"2026-05-08T02:54:08","date_gmt":"2026-05-08T02:54:08","guid":{"rendered":"https:\/\/www.newsbeep.com\/us-ca\/305323\/"},"modified":"2026-05-08T02:54:08","modified_gmt":"2026-05-08T02:54:08","slug":"canvas-hacked-for-a-second-time-students-personal-information-held-for-ransom-the-state-hornet","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us-ca\/305323\/","title":{"rendered":"Canvas hacked for a second time, student\u2019s personal information held for ransom \u2013 The State Hornet"},"content":{"rendered":"<p>Update 5\/7\/2026 4:11 p.m.: Sac State Information, Resources &amp; Technology sent a message from the chancellor\u2019s office out to Sac State emails. They said that there is no known time frame for when the problem will be solved, or when Canvas will be functioning again.<\/p>\n<p>On Thursday, May 7, students <a href=\"https:\/\/statusgator.com\/services\/canvas-instructure\/instructure\" rel=\"nofollow noopener\" target=\"_blank\">worldwide<\/a> received a message from the hacker group <a href=\"https:\/\/www.docontrol.io\/blog\/shinyhunters\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">ShinyHunters<\/a> when they logged into Canvas. The group claims to have stolen more than 3.65TB of student data from over <a href=\"https:\/\/cybernews.com\/security\/canvas-lms-shinyhunters-data-breach\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">9,000 schools<\/a>, including personal identifying information from over 275 million users.<\/p>\n<p>The hacker group said that if Instructure, the company that owns and operates Canvas, does not respond to their ransom demands by Tuesday, May 12 all the data will be leaked publicly.<\/p>\n<p>\u201cInstead of contacting us to resolve it they ignored us and did some \u2018security patches.\u2019\u201d ShinyHunters wrote in the ransom message. \u201cIf any schools in the affected list are interested in preventing the release of their data, please consult with a cyber advisory firm and contact us privately at <a href=\"https:\/\/www.google.com\/url?q=https:\/\/osintph.medium.com\/tox-messenger-and-how-cybercriminals-exploit-it-ed08af007fcc&amp;sa=D&amp;source=docs&amp;ust=1778196319958277&amp;usg=AOvVaw3AepB9e5RyWHmBWdKwZPM0\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">TOX<\/a> to negotiate a settlement.\u201d<\/p>\n<p>The ransom message provided <a href=\"http:\/\/91.215.85.103\/pay_or_leak\/instructure_affected_schools_list.txt\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">a link<\/a> to affected schools, including Sacramento State. Six CSU campuses were listed: Humboldt, Long Beach, East Bay, Dominguez Hills, Bakersfield and Channel Island. CSU resources were also affected, including CSU Online, Connect, Global Learn, the Shiley Haynes Institute for Palliative Care and the Office of the Chancellor itself.<\/p>\n<p>\u201cWe are working diligently to gather more details to better understand the scope and impact of this incident. Protecting the security and privacy of our students and employees is a top priority,\u201d wrote the CSU Chancellor\u2019s Office in a statement regarding the first hack.<\/p>\n<p>The Chancellor\u2019s Office issued <a href=\"https:\/\/lts.calstate.edu\/csu-canvas-incident-reports\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">an update<\/a> on May 7 stating that Canvas is down across all CSU campuses and they are working to fix the issue.<\/p>\n<p>RELATED: <a href=\"https:\/\/statehornet.com\/2026\/02\/meta-invests-in-sacramento-states-capitol-campus-project-sparking-community-questions\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">META invests in Sacramento State\u2019s Capital Campus project, sparking community questions<\/a><\/p>\n<p>Carter Chitiva, a third year journalism major, said that he is worried about the breach. He said that himself and his classmates noticed the breach in the middle of their data science class and were all shocked by the message.<\/p>\n<p>\u201c[I\u2019m] pretty goddamn nervous as, you know, finals are just around the corner. And now I can\u2019t even access anything,\u201d Chitiva said. \u201cAccording to the hackers, they got everything: our personal emails, our passwords, IDs, any financial information that we had on our accounts \u2013 they have everything.\u201d<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"wp-image-101084 size-medium\" src=\"https:\/\/www.newsbeep.com\/us-ca\/wp-content\/uploads\/2026\/05\/6xtdzfpqvrzg1-525x600.png\" alt=\"\" width=\"525\" height=\"600\"  \/>The message from ShinyHunters issuing instructions to comply with demands that met students signing into Canvas Thursday, May 7, 2026. The group obtained personal information from 9,000 schools from over 275 million users, including students at Sacramento State. (Screenshot courtesy of u\/crunchytee on r\/CSUS reddit)<\/p>\n<p>As of publication, <a href=\"https:\/\/www.reddit.com\/r\/CSUS\/comments\/1t6m39u\/canvas_got_hacked_again_and_the_hackers_are\/\" rel=\"nofollow noopener\" target=\"_blank\">both students and instructors<\/a> are unable to access Canvas through its website or mobile app. Students are advised to email their professors and stay tuned for any updates or messages about classwork. As of 3 p.m. on Thursday, the Canvas website states it is down for maintenance.<\/p>\n<p>Users should not input any personal information, log-in or change passwords into the Canvas system right now.<\/p>\n<p>Sac State and Sac State\u2019s Information, Resources &amp; Technology Office were unable to respond by press time.<\/p>\n<p>This story is ongoing and will be updated as more information becomes available.<\/p>\n<p>Additional Reporting by <a href=\"https:\/\/statehornet.com\/staff_name\/chris-johnson\/\" rel=\"nofollow noopener\" target=\"_blank\">Chris D. Johnson<\/a> and <a href=\"https:\/\/statehornet.com\/staff_name\/madison-lopez\/\" rel=\"nofollow noopener\" target=\"_blank\">Madison Lopez<\/a>. <\/p>\n","protected":false},"excerpt":{"rendered":"Update 5\/7\/2026 4:11 p.m.: Sac State Information, Resources &amp; Technology sent a message from the chancellor\u2019s office out&hellip;\n","protected":false},"author":2,"featured_media":305324,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32],"tags":[121,123,122],"class_list":["post-305323","post","type-post","status-publish","format-standard","has-post-thumbnail","category-sacramento","tag-sacramento","tag-sacramento-headlines","tag-sacramento-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/305323","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/comments?post=305323"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/305323\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media\/305324"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media?parent=305323"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/categories?post=305323"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/tags?post=305323"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}