Infinite Campus Breach Leaks Personal Information of 137,000 Users

Gbhackers •Divya • June 16, 2026

A data breach affecting the widely used K–12 student information system, Infinite Campus, has exposed the personal information of approximately 137,000 users. This incident is linked to an extortion campaign that occurred in March 2026 and has been attributed to the ShinyHunters threat group. It was officially recorded on Have I Been Pwned (HIBP). This […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShinyHunters Gang Breaches Infinite Campus, Exposing 137,000 School Staff Records In March 2026, the ShinyHunters extortion group executed a data breach targeting the Infinite Campus K-12 student information system, compromising personal information of over 137,000 school staff accounts. The attack involved a Salesforce data theft, with the exposed data including names, email addresses, job titles, and physical addresses. Infinite Campus, which serves over 3,200 school districts in the U.S., reported that the breach did not compromise customer databases but did leak directory information. The incident was confirmed by Have I Been Pwned, which analyzed the leaked data. The ShinyHunters group has claimed responsibility and has a history of targeting Salesforce accounts, having previously stolen over 1.5 billion records from various companies. This breach is reminiscent of the December 2024 PowerSchool hack, although the scale and impact differ significantly. 3 sources 65

Extracted Entities

Infinite Campus Breach Leaks Personal Information of 137,000 Users

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (1)