Infinite Campus
Disclosed Mar 24, 20266 months ago137,123 accountsUnverified
Infinite Campus Salesforce breach exposes 137,000 school staff accounts
K-12 student information system vendor Infinite Campus warned customers that an employee's Salesforce account was accessed, exposing school staff names and contact details; it refused to pay ShinyHunters. The group later leaked data on more than 137,000 staff accounts.
What is known
| People affected | 137,123 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Mar 24, 2026 |
| Discovered | Mar 2026 |
| Happened | Mar 18, 2026 |
| Attack | Extortion |
| Data exposed | Emails, Employment, Names, Phone numbers, Addresses |
| Sector | Education · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Infinite Campushaveibeenpwned.com · Aggregator | Aggregator |
| Infinite Campus data breach affects 137,000 school staff accountsbleepingcomputer.com · News | News |
| Infinite Campus warns of breach after ShinyHunters claims data theftbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Mar 24 | |
| Have I Been Pwnedaccounts in the data | Jun 15 | 137,123 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/InfiniteCampus to https://www.bleepingcomputer.com/news/security/infinite-campus-warns-of-breach-after-shinyhunters-claims-data-theft/ · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · disclosed: 2026-06-15 to 2026-03-24 · seed source
- 2026-09-25 · discovered: empty to 2026-03 · seed source
- 2026-09-25 · summary: In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email to K-12 student information system vendor Infinite Campus warned customers that an employee's Salesforce account was accessed, exposing school staff names and contact details; it refused to pay ShinyHunters. The group later leaked data on more · seed source
- 2026-09-25 · title: empty to Infinite Campus Salesforce breach exposes 137,000 school staff accounts · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.