Find notable cyber news and cases, enriched with sources, timelines, and signals.

Infinite Campus Salesforce records theft claim

Data Leak
First reported
Last updated
Happening score
H score 17
1 unique sources, 1 articles

Summary

Hide ▲

Infinite Campus is warning customers after ShinyHunters claimed it stole Salesforce records tied to the company, raising the risk of exposure for PII and internal corporate data. The company says the accessed material was mostly publicly available and that no customer databases were touched. It has disabled some customer-facing services for users without IP address restrictions while it reviews potentially affected data and contacts school districts. The threat actor set a March 25 deadline to open ransom talks and threatened to leak the data if the company refused.

Related Happenings

Grafana Labs Says GitHub hit by cyberattack

Incident
First: 17.05.2026 10:13 Last: 17.05.2026 10:13 Sources 1

About this happening: A **Grafana Labs** incident was later tied to the **Mini Shai-Hulud** supply-chain campaign against **TanStack npm packages**. Grafana said an unauthorized party used a token to a...

ShinyHunters school-by-school extortion campaign targeting Canvas institutions

Campaign
First: 11.05.2026 13:05 Last: 11.05.2026 13:05 Sources 1

About this happening: ShinyHunters intensified a **school-by-school extortion campaign** against **Canvas-related institutions**, increasing pressure on schools and universities as the group threatened...

Zara customer data leak exposing 197,400 people

Data Leak
First: 08.05.2026 13:42 Last: 08.05.2026 13:42 Sources 1

About this happening: The **Zara** customer-data leak now exposes **197,400 people**, creating privacy and phishing risk across multiple markets. The exposed records include **unique email addresses**,...

Instructure user personal information breach

Data Leak
First: 04.05.2026 01:16 Last: 04.05.2026 01:16 Sources 1

About this happening: Instructure confirmed a **data breach** that exposed **users' personal information**, putting students, teachers, and staff at risk across affected institutions. The exposed mater...

Medtronic hit by network compromise

Incident
First: 27.04.2026 16:50 Last: 27.04.2026 16:50 Sources 1

About this happening: Medtronic disclosed a **network breach** that reached **certain corporate IT systems**, making it a confirmed victim of a cyber intrusion. The company said there was **no impact**...

Timeline

  1. 24.03.2026 15:48 1 articles · 2mo ago

    ShinyHunters claims Infinite Campus Salesforce records and threatens leak

    Untyped Phase

    ShinyHunters claimed it stole Salesforce records tied to Infinite Campus, including personally identifiable information and internal corporate data, and posted a dark web “final warning” threatening to leak the material unless contact was made by March 25.

    Show sources
  2. 24.03.2026 15:48 2 articles · 2mo ago

    Infinite Campus warns customers and disables some services

    Initial Disclosure

    Infinite Campus warned customers that hackers accessed an employee's Salesforce account, said the exposed material was mostly publicly available directory information and that no customer databases were accessed, stated it would not engage with the attacker, disabled certain customer-facing services for users without IP address restrictions, and began scanning Salesforce data while contacting potentially impacted districts.

    Show sources