Loading story…
Glendale Community College disclosed a data breach after it was reportedly targeted in a ShinyHunters "pay or leak" extortion campaign, with stolen information later published online. Reporting on the incident says the exposed dataset contained 793,925 compromised accounts and nearly 800,000 unique email addresses, making it a large-scale exposure affecting students and other individuals tied to the college.
The leaked information reportedly included names, physical addresses, phone numbers, dates of birth, Social Security numbers, government-issued identification details, gender, academic records, and student enrollment-related data. The college said the exact data exposed may vary by individual, but the breadth of the breach raises immediate risks of phishing, identity theft, fraud, and account takeover attempts against affected people.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Glendale Community College said in its disclosure notice that the potentially impacted information varies by individual and may include names, addresses, phone numbers, dates of birth, Social Security numbers, government-issued IDs, genders, academic records, and enrollment-related data.
Data allegedly stolen from Glendale Community College was later published online. The exposed dataset reportedly included 793,925 compromised accounts or nearly 800,000 unique email addresses, along with personal and enrollment-related information.
In June 2026, Glendale Community College was targeted in a ShinyHunters "pay or leak" extortion campaign. Reports describe the college as a victim of the campaign before the stolen data was later published online.
HookPhish reported that Glendale Community College was breached on 2026-06-15. The breach was associated with the broader ShinyHunters extortion activity affecting the college.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
cyberveille.ch
Open sourcehookphish.com
Open sourcehaveibeenpwned.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The University of Nottingham said a cyber incident exposed a significant amount of data belonging to current and former students, and warned that people connected to its campuses in Nottingham, Malaysia, and China may be affected. The university said it is still determining exactly what was accessed, but is treating **contact details, university-related information, financial data, and sensitive personal information** as potentially compromised while a third-party forensic investigation continues. It has notified affected students and alumni and published a notice confirming that student and alumni data had been compromised. The **ShinyHunters** cybercrime group claimed responsibility on its extortion site, alleging it stole more than **40GB** of material including credit card and payment details. Analysis of partially published data by **Have I Been Pwned** indicated the leak contains about **455,000 unique email addresses** along with extensive personal information, although the full scope remains unverified and ShinyHunters has previously been accused of exaggerating or misrepresenting stolen data in extortion campaigns.
Jun 29, 2026
ShinyHunters allegedly breached Madison Square Garden Entertainment by socially engineering a low-level employee over the phone and stealing Microsoft Entra credentials, then published a **45GB** archive after a failed "pay or leak" extortion attempt. Reporting says the intrusion exposed data tied to Madison Square Garden, Radio City Music Hall, the Beacon Theatre, and the Sphere in Las Vegas, with the dumped records including customer and support data, internal corporate and talent files, and other sensitive operational information. The leaked dataset reportedly affected about **9.8 million** unique email addresses and included nearly **5 million** street addresses with names and phone numbers, roughly **9,500** dates of birth, and additional employment and customer relationship records. Multiple reports also say the breach exposed highly sensitive surveillance and biometric information, including facial-recognition-related records, celebrity threat profiles, activist dossiers, and internal watchlist data, prompting class action lawsuits and renewed scrutiny of MSG's identity security and facial recognition practices.
Jul 4, 2026
Infinite Campus disclosed that attackers breached its Salesforce environment in March and exposed personal information linked to more than **137,000** school staff accounts. The company said the intrusion affected a system containing staff names and contact information, while stating there was no evidence its core customer databases were compromised. Infinite Campus is a major K-12 student information system provider used by more than 3,200 U.S. school districts and roughly 11 million students across 46 states. The **ShinyHunters** extortion group later claimed responsibility and published data it said was stolen in a "pay or leak" campaign. Analysis by **Have I Been Pwned** found about **137,100** affected accounts, with exposed data including names, email addresses, employers, job titles, phone numbers, physical addresses, usernames, and support tickets. Infinite Campus told affected parties that much of the exposed information consisted of school staff directory details that are often publicly available on school websites.
Jun 29, 2026