Skip to content
Campus Alert Archive
KCC

Infrastructure failure, April 29, 2022

AI-generated · every claim is source-linked
MIinfrastructure failureadvisoryhigh confidence
Confirmed Threat

Kellogg Community College began experiencing technology issues tied to a ransomware attack on Friday, April 29, 2022, and closed all five of its campuses (Battle Creek, Hastings, Albion, the Regional Manufacturing Technology Center at Fort Custer, and Coldwater) affecting roughly 9,000 students. Classes and operations were suspended until the college could confirm its systems were safe, and students returned the following Wednesday. The attack struck at the end of the spring term.

Alerts
3
Response
—
Killed
—
Injured
—
Institution
Kellogg Community College
Community College · MI
All KCC cases →
~9,000 students
Documented Timeline

Alert Sequence

3 messages in sequence · 1 verified verbatim

Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.

Some messages in this sequence are documented (their existence, timing, and channel are sourced) but their exact wording is not preserved in the public record. Those entries appear as placeholders; only confirmed text is displayed.

INITIAL ALERTWebsite
Wording not yet recovered

A message was sent at this point in the sequence; its exact wording has not yet been recovered from the official record, so no text is shown. This site never paraphrases or reconstructs alert wording. Markers like this one keep the emergency's true shape and become word-for-word messages as recovery reaches the source.

UPDATEWebsite
Verified verbatim1523 chars
On Friday, April 29, we began experiencing technology issues that have been impacting our systems. As part of our investigation, we learned that those issues were related to a ransomware attack. We have been working with our IRT experts to resolve this situation as quickly as possible. As we are investigating this incident, all campuses will remain closed until further notice, and we are canceling classes until we are able to reopen safely. We are implementing security measures to prevent any further unauthorized access to our network – including a forced password reset for all students, faculty and staff. Additionally, as a precautionary measure, all campuses have been disconnected and our systems will remain offline until they are deemed secure by our IT experts. As a result, our students and staff might experience delays accessing our services, including campus emails, online classes and resources. We understand that our students might be concerned about this situation, especially as we are nearing the end of the semester and for many, exams are top of mind. We want to reassure our faculty and students that we will take any actions necessary for students to complete course work in a timely manner. We are committed to working with our faculty to support our students, and sincerely apologize for the interruption this incident has caused. Our investigation is still in its early stages, and we will share updates as soon as we learn more. We appreciate your patience and support in the meantime.
Reconstructed from the KCC Daily article, which dated the start of issues to April 29 and confirmed the ransomware attack and the closure of all five campuses.
Lane B flip 2026-10-12: full text recovered from the official KCC Daily post filed under the Alerts category (sole category; not News Releases). It is a longer first-person notice than the prior reconstruction and does not mention independent advisors or third-party experts; it announces the forced password reset already on May 2.
UPDATEWebsite
Wording not yet recovered

A message was sent at this point in the sequence; its exact wording has not yet been recovered from the official record, so no text is shown. This site never paraphrases or reconstructs alert wording. Markers like this one keep the emergency's true shape and become word-for-word messages as recovery reaches the source.

Context

Background

Kellogg Community College, a roughly 9,000-student two-year college based in Battle Creek, Michigan, began experiencing technology problems on Friday, April 29, 2022, that it later confirmed were a ransomware attack. The attack forced the closure of all five KCC campuses (in Battle Creek, Hastings, Albion, the Fort Custer Industrial Park, and Coldwater) and the cancellation of classes near the end of the spring term, according to WOOD-TV and The Record. Students returned Wednesday, May 4, after the college said independent advisors and third-party experts confirmed its systems were secure, and required password resets. Some reporting linked the BlackCat/ALPHV ransomware group to the incident, though the college did not publicly confirm attribution. As with peer institutions, the attack closed physical campuses because the underlying systems that run classes were offline.
Analysis

Key Findings

A ransomware attack closed all five Kellogg Community College campuses near the end of the spring term
Roughly 9,000 students were affected across Battle Creek, Hastings, Albion, Fort Custer and Coldwater
The college tied reopening to a security confirmation rather than a fixed date and required mandatory password resets
Reporting linked the BlackCat/ALPHV group to the attack, a prolific actor in higher-ed ransomware in 2022-2023
Outcome
KCC reopened campuses and resumed classes Wednesday, May 4, 2022, after independent advisors and third-party experts confirmed the systems were secure; the college required password resets. Reporting linked the BlackCat/ALPHV group to the attack, though KCC did not confirm attribution publicly.
Provenance

Sources

Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.

  1. Official
  2. News
  3. News
  4. News
Cite this case

Campus Alert Archive. "Kellogg Community College: Infrastructure failure, April 29, 2022." Incident of April 29, 2022. Added May 2026; last updated October 2026. https://campusalertarchive.com/case/kellogg-community-college-ransomware-2022-04-29/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
cyberattackransomwarecommunity-collegemichiganblackcat-alphvcampus-closureadvisory
Added May 2026Updated October 2026Via ingestion