ShinyHunters Claim Infinite Campus Salesforce Data Theft Affecting 137,100 Accounts
Summary
Have I Been Pwned said analysis of leaked data identified 137,100 accounts. ShinyHunters claimed responsibility for a March Salesforce attack; Infinite Campus said it had no evidence customer databases were compromised and that most exposed data was directory info.
Key points
- ShinyHunters claimed responsibility for a March data theft targeting Infinite Campus’s Salesforce instance.
- Have I Been Pwned said its analysis identified data from 137,100 accounts.
- Reported exposed information included names, contact details, usernames, addresses, job information, and support tickets.
- Infinite Campus said most exposed information was directory data commonly available on school websites.
- Infinite Campus said it had no evidence that customer databases were compromised.
Article Details
- Victim Organization
- Infinite Campus
- Incident Type
- Data breach and data theft involving Infinite Campus's Salesforce instance
- Data Types Exposed
- Names
- Email addresses
- Employer information
- Job titles
- Phone numbers
- Physical addresses
- Usernames
- Support tickets
- Internal corporate data (alleged)
- Affected Records
- 137,100 accounts, according to Have I Been Pwned's analysis of the leaked data.
- Affected Data Size
- ShinyHunters claimed to have leaked a 1.2 GB archive of documents allegedly containing Salesforce records and other internal corporate data.
- Operational Impact
- School staff account information was exposed. Infinite Campus said it had no evidence that customer databases were compromised.
- Ransom Or Extortion
- ShinyHunters claimed responsibility on its data leak site and published data it alleged was stolen. No ransom demand was reported.
- Claim Status
- confirmed
Threat Actors
Vendors
Infinite CampusShinyHunters stole personal information from more than 137,000 school staff accounts in a Salesforce attack targeting Infinite Campus, an EdTech provider used by thousands of U.S.SalesforceShinyHunters stole personal information from more than 137,000 school staff accounts in a Salesforce attack targeting Infinite Campus, an EdTech provider used by thousands of U.S.
Products
Infinite CampusShinyHunters stole personal information from more than 137,000 school staff accounts in a Salesforce attack targeting Infinite Campus, an EdTech provider used by thousands of U.S.SalesforceShinyHunters stole personal information from more than 137,000 school staff accounts in a Salesforce attack targeting Infinite Campus, an EdTech provider used by thousands of U.S.