Glendale College breach exposes data on 793,000 students and applicants

Glendale Community College has had data on roughly 793,000 people exposed after the extortion group ShinyHunters stole files from its student information systems. Have I Been Pwned indexed 793,925 accounts, and the attackers claim to have taken more than 62GB across roughly 304,000 files, including student records with personal identifiers, financial aid exports, immunization logs, admission checklists, and transcripts dating back to 2020. The theft came from the college's PeopleSoft Campus Solutions environment, tying it to the wider ShinyHunters campaign against Oracle PeopleSoft that has hit numerous universities and companies. The breadth of academic and personal data raises the risk of identity theft and targeted phishing against students, applicants, and staff.

Check

People connected to Glendale Community College as students, applicants, or staff should watch for a breach notice, check Have I Been Pwned, monitor financial accounts, and be alert to college-themed phishing.

Affected

Around 793,000 Glendale Community College students, applicants, and staff whose personal, academic, financial aid, and health-related records were exposed; the depth of data supports identity theft and convincing targeted phishing.

Fix

Affected people should consider a credit freeze and monitor accounts. Organizations using Oracle PeopleSoft should apply its mitigations, review access logs, and enforce phishing-resistant MFA against this ongoing campaign.