Infinite Campus Data Breach Exposes Personal Data of 137,000 Users

Infinite Campus disclosed that threat actor group ShinyHunters carried out a pay-or-leak extortion campaign in March 2026, publishing an allegedly stolen dataset affecting approximately 137,000 users. The leaked records reportedly include names, email addresses, usernames, phone numbers, physical addresses, employer details, job titles, and the contents of internal support tickets; exposed support-ticket data elevates the risk of targeted phishing, social engineering, and business email compromise against school staff and districts.