Infinite Campus Data Breach (2026)

On March 18, 2026, the education technology provider Infinite Campus became the latest victim in a ShinyHunters “pay or leak” extortion campaign. The group published a dataset containing 137,000 unique email addresses along with names, phone numbers, physical addresses, employers, job titles, usernames, and support tickets. Although Infinite Campus stated that the majority of the records concerned school staff and largely duplicated information already available on public school websites, the exposure still places real personal details of educators, administrators, and potentially some families into the hands of data traders and harassers.

Reported Details of the Breach

Public reporting from Have I Been Pwned confirms the dataset appeared on a leak site operated by ShinyHunters. The company later sent breach notifications explaining that the records primarily contained names and contact information for school staff. Infinite Campus emphasized that most of the data qualified as directory information already visible on school websites. However, the published file also included support tickets and additional fields not normally public. No evidence has surfaced that student academic records or grades were taken.

Why This Matters for You and Your Family

When school staff data appears in a breach, the impact reaches beyond the workplace. Teachers, principals, and administrative personnel often share the same contact details at home. A single leaked phone number or address can be used to locate your family, send harassing messages, or attempt identity theft. Children’s school-related accounts sometimes link back to the same family email or phone, creating an unintended bridge between professional and personal exposure. Even directory information becomes dangerous once it is aggregated with data from other breaches.

The Doxxing and Identity-Chain Implications

Names, physical addresses, and phone numbers serve as anchors that tie disparate online handles together. Threat actors routinely combine this information with usernames and support tickets to map out family relationships, children’s gaming accounts, and social-media profiles. What begins as a professional breach can cascade into doxxing campaigns or account takeovers months later. Credential leaks of this nature frequently surface in subsequent attacks on personal email, banking, or gaming platforms because people reuse passwords across work and home systems.

ShinyHunters’ Publicly Known Track Record

Public reporting attributes the campaign to the group known as ShinyHunters. The actors first gained attention several years ago by targeting consumer-facing services and then shifted toward education and healthcare organizations. Their typical playbook involves initial access through stolen credentials or vulnerabilities, followed by exfiltration of contact databases and support logs. They then demand payment and, if unpaid, publish samples or full datasets on leak sites. Previous victims have included large online retailers and other SaaS platforms, showing a pattern of opportunistic “pay or leak” extortion rather than sophisticated ransomware encryption.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you used at Infinite Campus or related school systems and enable 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure is caught in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites on your behalf.

The incident underscores that even directory information can fuel larger identity chains if left unchecked. Taking deliberate steps now limits how far this breach can reach your family. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts—making it an effective tool against the exact cascade of credential leaks and doxxing that incidents like this one enable.