Breachesby GlyphInfinite Campus
Disclosed Mar 24, 2026137,123 accountsUnverified
Infinite Campus Salesforce breach exposes 137,000 school staff accounts
K-12 student information system vendor Infinite Campus warned customers that an employee's Salesforce account was accessed, exposing school staff names and contact details; it refused to pay ShinyHunters. The group later leaked data on more than 137,000 staff accounts.
What is known
| People affected | 137,123 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Mar 24, 2026 |
| Discovered | Mar 2026 |
| Happened | Mar 18, 2026 |
| Attack | Extortion |
| Data exposed | EmailsEmploymentNamesPhone numbersAddresses |
| Sector | Education · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
aggregator to pressby seedSource
https://haveibeenpwned.com/Breach/InfiniteCampus to https://www.bleepingcomputer.com/news/security/infinite-campus-warns-of-breach-after-shinyhunters-claims-data-theft/by seedSource
empty to USby seedSource
2026-06-15 to 2026-03-24by seedSource
empty to 2026-03by seedSource
In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email to K-12 student information system vendor Infinite Campus warned customers that an employee's Salesforce account was accessed, exposing school staff names and contact details; it refused to pay ShinyHunters. The group later leaked data on moreby seedSource
empty to Infinite Campus Salesforce breach exposes 137,000 school staff accountsby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.