Infinite Campus, a leading K-12 student information system provider, has notified customers of a data breach following an extortion attempt by the threat group ShinyHunters. Hackers accessed an employee’s Salesforce account, exposing mostly publicly available information. Although Infinite Campus hasn’t issued an official statement, customers reported the breach online. ShinyHunters, known for targeting Salesforce accounts, threatened to leak the stolen data unless contacted by March 25, 2026. Infinite Campus, however, refuses to engage with the attackers. ShinyHunters claims to have stolen Salesforce records containing personally identifiable information (PII) and internal corporate data. Infinite Campus serves over 3,200 US school districts, managing data for 11 million students across forty-six (46) states. The company maintains that no customer databases were accessed, and the exposed data mainly includes directory information commonly found on school websites. In response, Infinite Campus has disabled certain services without IP restrictions to minimize potential data exposure and is scanning Salesforce data for any compromise. The incident is reminiscent of the December 2024 PowerSchool hack, although its impact was smaller, with PowerSchool exposing sensitive information of 62 million students.