A data breach at education technology provider Infinite Campus has exposed the personal information of more than 137,000 school staff members after threat actors compromised the company's Salesforce environment.
The incident involved the ShinyHunters extortion group, which claimed responsibility and leaked a 1.2 GB archive of records online. Have I Been Pwned reported that the data included approximately 137,100 unique email addresses along with names, phone numbers, physical addresses and support tickets.
Infinite Campus confirmed that the attack targeted its Salesforce environment rather than its student information databases. No student records were compromised in the breach.
The company has notified those affected by the incident. The exposed staff contact details, while often publicly available through school directories, could still support phishing and social engineering campaigns.