EdTech Attacks Raise Data-Security Concerns; Global Schools Foundation Confirms Incident
Summary
The article describes reported ShinyHunters targeting of education platforms and FulcrumSec’s extortion claim against Global Schools Foundation, which confirmed a cyberattack. Specific stolen-data claims and attribution remain unverified or contested.
Key points
- The article reports that ShinyHunters targeted education platforms and allegedly stole student and educator information, including records from an online learning system.
- It says ShinyHunters claimed new education-sector victims on June 16, 2026, and reports a March data-theft attack involving staff accounts at Infinite Campus.
- FulcrumSec claims it stole data from Global Schools Foundation (GSF) and threatened publication unless a ransom was paid; the article gives extensive data-volume claims attributed to sources.
- GSF confirmed a cyberattack and said it was working with cybersecurity experts and law enforcement. The article does not establish that GSF confirmed the specific data-theft or extortion claims.
- The article describes conflicting attribution: GSF reportedly said ShinyHunters had previously taken the same data, while ShinyHunters said it had never heard of GSG.
- Recommended measures include securing APIs and databases, improving threat detection and incident response, training employees, and maintaining offline backups.
Article Details
- Event Type
- Reported data breaches, data theft, and ransomware extortion targeting EdTech companies and educational institutions.
- Impact
- The article reports that ShinyHunters stole millions of records from EdTech platforms, including data belonging to more than 4 million students and educators in one incident and personal information from over 137,000 school staff accounts in another. FulcrumSec claimed responsibility for a data theft affecting Global Schools Foundation; the article reports disruption to school systems and exposure of extensive student, employee, financial, and other sensitive records. Global Schools Foundation confirmed a cyberattack, but the attribution and details of the incidents are presented as reported or claimed.
Threat Actors
fulcrumsecClaimed responsibility for data theft from Global Schools Foundation and reportedly threatened to publish the stolen data unless a ransom was paid. The article describes the incident as involving disruption and double-extortion claims.ShinyHuntersThe article reports that ShinyHunters breached EdTech platforms and stole personal data, and says the group announced new victims. Global Schools Foundation initially said ShinyHunters had taken the same data and extorted it; ShinyHunters reportedly said it had never heard of GSG.
Vendors
Products
CanvasEdTech platforms—ranging from Student Information Systems (SIS) to Learning Management Systems (LMS) like Canvas and PowerSchool—they have become high-value targets for cybercriminals.Infinite CampusThe gang also stole personal information from more than 137,000 school staff accounts in a Salesforce data theft attack that targeted the widely used Infinite Campus K-12 student information system in March.PowerSchoolfrom Student Information Systems (SIS) to Learning Management Systems (LMS) like Canvas and PowerSchool—they have become high-value targets for cybercriminals.
Countries
SingaporeGlobal Schools Foundation (GSF), an international network of educational institutions headquartered in Singapore.United StatesInfinite Campus is an education technology (EdTech) company that provides a student information system (SIS) to over 3,200 school districts across the United States, managing data for 11 million students in 46 states.
Industries
EducationTuesday, June 16, 2026, 10:11 UTC — The education technology (EdTech) sector has become a prime target for cybercriminals as attacks against educational institutions and related platforms continue to escalate.Education technologyTuesday, June 16, 2026, 10:11 UTC — The education technology (EdTech) sector has become a prime target for cybercriminals as attacks against educational institutions and related platforms continue to escalate.