Infinite Campus Reports Salesforce Account Breach After ShinyHunters Extortion Claim
Summary
Infinite Campus says an employee’s Salesforce account was accessed during an extortion attempt. The company says exposed data was mostly public directory information, reports no customer databases were accessed, and is scanning data and contacting districts.
Key points
- Infinite Campus told customers that an employee’s Salesforce account was accessed; ShinyHunters separately claimed responsibility and threatened to leak allegedly stolen data.
- The company says its investigation found no customer databases were accessed and that exposed information was mostly school staff names and contact details commonly available online.
- Infinite Campus said it would not negotiate with the group.
- The company disabled some customer-facing services for users without IP restrictions while scanning Salesforce data for possible exposure.
- Infinite Campus is contacting potentially affected school districts; the number of impacted districts had not been reported.
Article Details
- Victim Organization
- Infinite Campus
- Incident Type
- Unauthorized access to an employee’s Salesforce account and exposure of data, followed by an extortion attempt. ShinyHunters claimed responsibility and claimed data theft; Infinite Campus confirmed a breach but did not publicly attribute it to the group.
- Data Types Exposed
- School staff names and contact information; Infinite Campus said most was publicly available directory information.
- Personally identifiable information and internal corporate data were claimed by ShinyHunters as stolen; the article does not confirm those claims.
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Infinite Campus disabled certain customer-facing services for users without IP address restrictions, scanned Salesforce data that may have been compromised, and contacted potentially impacted districts. The company said no customer databases were accessed.
- Ransom Or Extortion
- ShinyHunters threatened to leak allegedly stolen data and gave Infinite Campus until March 25 to initiate contact and negotiate a ransom. Infinite Campus said it would not engage with the attacker; no ransom amount was reported.
- Claim Status
- confirmed