On March 22, 2026, the ShinyHunters ransomware group claimed an attack on Infinite Campus, Inc., a company providing student information systems. The attackers reported compromising Salesforce records containing personally identifiable information (PII) and internal corporate data. This incident was disclosed via threat actor posts and has not yet been officially confirmed by the company.
Specific types of PII beyond the general category have not been detailed. The estimated number of affected individuals is unknown. The incident was reported very recently, and public information regarding official company statements, regulatory notifications, or consumer notifications is not yet available. It remains unclear which states or specific customers may have been impacted, though the company serves schools in 46 states.
Further details about the breach, including the full scope of exposed data and affected individuals, may emerge as investigations proceed. Official notifications for consumers may also be delayed given the recent nature of the incident.