A data breach affecting education technology provider Infinite Campus has exposed the personal information of more than 137,000 school staff members. The incident occurred after threat actors allegedly compromised the company’s Salesforce environment and leaked stolen records online. “The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email addresses along with names, phone numbers, physical addresses and support tickets,” data breach notification service Have I Been Pwned (HIBP) said in its analysis of the leaked data. Key takeaways of the Infinite Campus incident Infinite Campus says the incident targeted its Salesforce environment, not its student information databases. The breach exposed personal and contact information tied to approximately 137,000 school staff accounts. ShinyHunters claimed responsibility and allegedly leaked a 1.2 GB archive of Salesforce records and internal data. Although student records were not compromised, the exposed data could support phishing and social engineering campaigns. The incident underscores the growing security risks of SaaS platforms and third-party vendors in education. Inside the Infinite Campus incident As BleepingComputer reported, the incident highlights …