Infinite Campus — data breach (InfiniteCampus)

Domain: infinitecampus.com · Accounts affected: 137,123 · Data exposed: Email addresses, Employers, Job titles, Names, Phone numbers, Physical addresses, Support tickets, Usernames · Verified breach — In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email addresses along with names, phone numbers, physical addresses and support tickets. Infinite Campus subsequently sent notifications, advising that the exposed data largely consisted of "names and contact information for school staff" and that "the majority is directory information commonly found on school websites".