[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1wdklqs8uishv":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"publishedAt":12,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":12,"affectedCountUnit":20,"hasEnglishDescription":4,"contentLocale":21,"availableLocales":22,"translations":24,"severity":27,"dataClasses":28,"description":37,"seoTitle":38,"seoDescription":39,"logoUrl":40,"isVerified":4,"isSensitive":4,"isSpamList":41,"isMalware":41,"company":42},"6a452308a20f867c8ba8e779","infinite-campus","Infinite Campus 2026 Data Breach","infinitecampus.com","2026-03-18T00:00:00.000Z","2026-06-15T01:03:42.000Z",null,"2026-07-29T15:01:55.152Z","Company notification context and independently reported authenticated corpus","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Finfinite-campus-data-breach-affects-137-000-school-staff-accounts\u002F",[15,17],"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Finfinite-campus-warns-of-breach-after-shinyhunters-claims-data-theft\u002F",137123,"known","email_identifiers","en",[21,23],"tr",{"en":25,"tr":26},{"slug":7},{"slug":7},"High",[29,30,31,32,33,34,35,36],"Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses","Support tickets","Usernames","\u003Cp>\u003Cstrong>The Infinite Campus 2026 data breach\u003C\u002Fstrong> was linked, according to the company's account, to unauthorized access to an employee Salesforce account. Infinite Campus said it became aware of the incident on 18 March 2026, that the accessed environment contained school-staff names and contact details, and that most of this information was already available in school directories. The company also said it found no evidence that customer databases were accessed. The ShinyHunters name and the threat to publish data unless paid come from the attacker's claim; the company did not authenticate the actor's identity.\u003C\u002Fp>\n\n\u003Cp>After data was published, a verified breach index reported 137,123 unique email addresses in the attributed archive. The index lists email addresses, employers, job titles, names, phone numbers, physical addresses, support tickets, and usernames as data classes. This is not a unique-person count and does not mean every field was present in every record. Production has no local import job or searchable person-level corpus linked to this incident, so 137,123 is not presented as a locally imported record count.\u003C\u002Fp>\n\n\u003Ch2>What does the evidence establish?\u003C\u002Fh2>\n\u003Cp>The company account supports access to an employee Salesforce account and its finding of no evidence that customer databases were compromised. Independent reporting later described an allegedly published archive of about 1.2 GB and the verified index's field analysis. This evidence does not establish exposure of student grades, health information, passwords, or the core student-information-system databases. The support-ticket class does not prove that every ticket contained the same information. A match alone does not show that a person is a student or parent or that a current Infinite Campus account is compromised.\u003C\u002Fp>\n\n\u003Ch2>Safe next steps\u003C\u002Fh2>\n\u003Cp>Affected school staff should be cautious of targeted phishing that uses an organization name, job title, or old support context. Instead of following a link that requests a password change, open the school's or Infinite Campus's known sign-in address directly and verify suspicious requests with the institution's IT team through a separate channel. If the same password was reused on another service, replace it with a unique password and enable multifactor authentication. An email match should not be used to infer additional facts about students or families.\u003C\u002Fp>","Infinite Campus 2026 Data Breach (137.1 Thousand Email Identifiers)","Review the Infinite Campus employee-Salesforce incident and 137,123 unique-email scope, with the company account and evidence limits.","\u002Fuploads\u002Flogo\u002Finfinitecampus_com.webp",false,{"name":43,"sector":44,"country":45,"website":9,"websiteArchiveUrl":46,"websiteStatus":46,"websiteCheckedAt":12},"Infinite Campus","Education Technology","United States",""]