Severity: HIGH

The ShinyHunters extortion group claimed responsibility for a data breach impacting Infinite Campus, a widely used K-12 student information system. The breach, which occurred in March, resulted from a Salesforce data theft and exposed personal information from over 137,000 school staff accounts. The compromised data includes names, phone numbers, physical addresses, and support tickets, with Infinite Campus confirming the exposure of directory information.

Source: BleepingComputer