$ intel.mask2.ca

ADVISORY · 2026-06-15 · SRC BLEEPINGCOMPUTER · HIGH
2026-06-15 high REL 7/10

Infinite Campus breach exposes 137,000 school staff accounts via Salesforce compromise

post-secondarygovernment

ShinyHunters threat actors exploited Salesforce infrastructure in March to breach Infinite Campus, a student information system widely deployed across K-12 schools. The attack compromised personal data belonging to over 137,000 school staff members. Infinite Campus is a critical platform for educational institutions across North America, including Canadian school districts.

Why it matters in Western Canada: Western Canadian school districts and post-secondary institutions using Infinite Campus for student records and administrative functions face potential credential exposure and identity theft risks affecting staff. Educational organizations in BC, Alberta, Saskatchewan, and Manitoba should verify their deployment status and assess exposure.


Summary generated from the original advisory. Read the full source: bleepingcomputer

Source
https://www.bleepingcomputer.com/news/security/infinite-campus-data-breach-affects-137-000-school-staff-accounts/
CVEs
None listed
Tags
data-breach, salesforce, education, credential-theft, shinyunters
Provenance
mask2-ti-pipeline (AI-assisted, human-reviewable)