Belgrade, Montana, schools restoring systems after malware disruption

Belgrade School District says malware disrupted systems, with restoration and a personal information review continuing into June.

DysruptionHub

Several #EdTech folks asked me to review the #InfiniteCampus data dump by #ShinyHunters to see if any sensitive student data was leaked as part of it.

I wrote up what I found here: https://databreaches.net/2026/03/28/thankfully-the-infinite-campus-incident-did-not-involve-a-lot-of-non-directory-student-information/

One takeaway for school districts is to remind employees NOT to include student PII or PHI in support tickets to vendors. I've been told it is sometimes required or necessary, but then why weren't tickets like the ones I saw stored with encryption?

#databreach #EduSec #cybersecurity
@mkeierleber @douglevin @funnymonkey

Infinite Campus warns of breach after ShinyHunters claims data theft

Infinite Campus, a widely used K-12 student information system, is warning customers of a data breach following an extortion attempt by a threat actor.

BleepingComputer
Infinite Campus says Salesforce account intrusion led to customer service shutdowns in Minnesota #InfiniteCampus #DataBreach #Extortion #Minnesota #Salesforce #ServiceDisruption https://dysruptionhub.com/infinite-campus-intrusion-shutdowns-mn/
Infinite Campus says Salesforce account intrusion led to customer service shutdowns in Minnesota

Infinite Campus says a Salesforce account intrusion led to precautionary customer service shutdowns as districts reported outages.

DysruptionHub

@douglevin @brett @mkeierleber
@BleepingComputer @campuscodi

In response to some questions from concerned readers, I contacted SingularityMD with some additional questions about the Jeffco Public Schools attack. I have updated my latest post at:

https://www.databreaches.net/hackers-give-jeffco-public-schools-an-extension-on-their-deadline-to-respond-email-parents-about-the-breach/

It seems that Infinite Campus and Google are trying to address some the issues these hacks and media coverage have raised. But how many more districts will become victims before these issues are really addressed?

#databreach #edusec #edtech #infosec #GoogleGroups #InfiniteCampus #extortion

Hackers give Jeffco Public Schools an extension on their deadline to respond; email parents about the breach (1)

On November 2, DataBreaches reported that the same threat actors that had hacked and exfiltrated data from Clark County School District in Las Vegas had also...