ShinyHunters Gang Breaches Infinite Campus, Exposing 137,000 School Staff Records

In March 2026, the ShinyHunters extortion group executed a data breach targeting the Infinite Campus K-12 student information system, compromising personal information of over 137,000 school staff accounts. The attack involved a Salesforce data theft, with the exposed data including names, email addresses, job titles, and physical addresses. Infinite Campus, which serves over 3,200 school districts in the U.S., reported that the breach did not compromise customer databases but did leak directory information. The incident was confirmed by Have I Been Pwned, which analyzed the leaked data. The ShinyHunters group has claimed responsibility and has a history of targeting Salesforce accounts, having previously stolen over 1.5 billion records from various companies. This breach is reminiscent of the December 2024 PowerSchool hack, although the scale and impact differ significantly.

Key Points: • ShinyHunters breached Infinite Campus, exposing data of 137,000 school staff accounts. • The attack targeted Salesforce and involved the theft of personal information including PII. • Infinite Campus confirmed no customer database compromise, but directory information was leaked.