Infinite Campus breach exposes 137,000 school staff accounts via Salesforce compromise
ShinyHunters threat actors exploited Salesforce infrastructure in March to breach Infinite Campus, a student information system widely deployed across K-12 schools. The attack compromised personal data belonging to over 137,000 school staff members. Infinite Campus is a critical platform for educational institutions across North America, including Canadian school districts.
Why it matters in Western Canada: Western Canadian school districts and post-secondary institutions using Infinite Campus for student records and administrative functions face potential credential exposure and identity theft risks affecting staff. Educational organizations in BC, Alberta, Saskatchewan, and Manitoba should verify their deployment status and assess exposure.
Summary generated from the original advisory. Read the full source: bleepingcomputer
- Source
- https://www.bleepingcomputer.com/news/security/infinite-campus-data-breach-affects-137-000-school-staff-accounts/
- CVEs
- None listed
- Tags
- data-breach, salesforce, education, credential-theft, shinyunters
- Provenance
- mask2-ti-pipeline (AI-assisted, human-reviewable)