2026 Infinite Campus — 137,100 school staff accounts (Salesforce / ShinyHunters)
Data compromised
137,100 school staff accounts per HIBP (names, emails, employers, job titles, phones, addresses, usernames, support tickets); vendor said no customer SIS DB access
Technical writeup
Infinite Campus, a K-12 student information system vendor serving 3,200+ U.S. school districts (~11 million students across 46 states), notified customers in March 2026 after ShinyHunters claimed data theft from a compromised employee Salesforce account and posted a 1.2 GB archive on its leak site. The company said attackers targeted its Salesforce instance with school-staff names and contact details—much of it directory-style data also on public school websites—and stated it had no evidence that core customer SIS databases were accessed. On June 15, 2026, Have I Been Pwned analyzed the published trove and indexed 137,100 unique accounts with names, email addresses, employers, job titles, phone numbers, physical addresses, usernames, and support tickets—aligning with BleepingComputer reporting on the confirmed staff-account scope. Infinite Campus described the actor as part of the industry-wide ShinyHunters Salesforce targeting wave and said it would not pay ransom.
Root cause
Compromised employee Salesforce account (ShinyHunters extortion / Salesforce tenant export)