Infinite Campus Breach Leaks Personal Information of 137,000 Users

- Infinite Campus experienced a data breach attributed to the ShinyHunters extortion group that exposed approximately 137,100 unique email addresses and associated PII (names, phone numbers, addresses, employers, job titles, usernames) plus internal support ticket records; attackers published the data after issuing a pay-or-leak demand. The report highlights aggregation risks enabling targeted phishing, BEC, and credential-stuffing attacks, recommends MFA, access-log review, API audits, and notes no current evidence of student academic or financial data compromise.