Infinite Campus hit by data theft breach linked to ShinyHunters
Incident
Summary
Hide ▲
Show ▼
Infinite Campus suffered a Salesforce data theft breach that exposed more than 137,000 school staff accounts, putting staff contact and account data at risk. The compromise targeted the Infinite Campus K-12 student information system and was linked to ShinyHunters. A later leak included an alleged 1.2GB archive of Salesforce records, and breach analysis reported 137,100 accounts with names, email addresses, phone numbers, physical addresses, usernames, and support tickets. The event matters because the platform serves 3,200+ school districts and manages data for 11 million students across the United States.
Related Happenings
University of Nottingham hit by cyberattack
Incident
H score68
First: 11.06.2026 10:27
Last: 11.06.2026 10:27
Sources 1
About this happening:
The University of Nottingham said a well-known cybercriminal group accessed its student record system, exposing a significant amount of data affecting current students and...
University of Nottingham hit by cyberattack
IncidentAbout this happening: The University of Nottingham said a well-known cybercriminal group accessed its student record system, exposing a significant amount of data affecting current students and...
Nottingham University data publication on ShinyHunters leak site
Data Leak
H score68
First: 10.06.2026 21:31
Last: 10.06.2026 21:31
Sources 1
About this happening:
Nottingham University data was published on the ShinyHunters leak site after the group claimed access to the university’s student records system. The exposed material...
Nottingham University data publication on ShinyHunters leak site
Data LeakAbout this happening: Nottingham University data was published on the ShinyHunters leak site after the group claimed access to the university’s student records system. The exposed material...
ShinyHunters Oracle PeopleSoft data theft and extortion campaign
Campaign
H score60
First: 10.06.2026 21:31
Last: 10.06.2026 21:31
Sources 1
About this happening:
ShinyHunters/UNC6240 used CVE-2026-35273 in Oracle PeopleSoft Enterprise PeopleTools as a zero-day to break into exposed systems, steal data, and extort victim...
ShinyHunters Oracle PeopleSoft data theft and extortion campaign
CampaignAbout this happening: ShinyHunters/UNC6240 used CVE-2026-35273 in Oracle PeopleSoft Enterprise PeopleTools as a zero-day to break into exposed systems, steal data, and extort victim...
Latest development: 29.06.2026 23:40
Nissan says attackers exploited an Oracle PeopleSoft vulnerability in a ShinyHunters-linked campaign and that the company was specifically targeted, with personal information for current and former employees in the United States, Canada, Mexico, and Brazil potentially exposed. Nissan says the material may include employee contact information, banking information, Social Security numbers, Social Insurance Numbers, National Identification Numbers, financial and tax information, and dependent and beneficiary information, and the company has activated incident response, engaged external cybersecurity experts, secured affected systems, and is working with Oracle.
DentaQuest 2.6 million-account data leak
Data Leak
H score65
First: 04.06.2026 21:36
Last: 04.06.2026 21:36
Sources 1
About this happening:
DentaQuest's public leak exposed records for 2.6 million accounts, putting personal and health-related data at risk. The leak followed ShinyHunters' claim to h...
DentaQuest 2.6 million-account data leak
Data LeakAbout this happening: DentaQuest's public leak exposed records for 2.6 million accounts, putting personal and health-related data at risk. The leak followed ShinyHunters' claim to h...
7-Eleven hit by network compromise
Incident
H score53
First: 19.05.2026 17:16
Last: 19.05.2026 17:16
Sources 1
About this happening:
7-Eleven is a victim-focused breach incident in which an unauthorized third party accessed systems used to store franchisee documents on April 8, 2026, trigger...
7-Eleven hit by network compromise
IncidentAbout this happening: 7-Eleven is a victim-focused breach incident in which an unauthorized third party accessed systems used to store franchisee documents on April 8, 2026, trigger...
Timeline
-
15.06.2026 15:38 2 articles · 1mo ago
Infinite Campus hit by data theft breach linked to ShinyHunters
Initial DisclosureA March compromise of Infinite Campus's Salesforce instance exposed school staff contact data and triggered breach notifications. Later disclosure tied the event to a published archive and a reported total of 137,100 affected accounts.
Show sources
- Infinite Campus data breach affects 137,000 school staff accounts — www.bleepingcomputer.com — 15.06.2026 15:38
- Infinite Campus data breach affects 137,000 school staff accounts — www.bleepingcomputer.com — 15.06.2026 15:38