April 11, 2014 – Blaine, Minn. – Infinite Campus application software was not impacted by Heartbleed, the security vulnerability widely publicized earlier in the week. Heartbleed is a security flaw in OpenSSL, a popular data encryption standard. Campus customers using Cloud, Cloud Choice, and Onsite hosting options were not impacted.

Infinite Campus monitors such vulnerabilities and became aware of the flaw before it was widely publicized. By the time mainstream media picked up on Heartbleed, the team already verified that all managed customers were protected with the latest patches.

Upon learning about Heartbleed, our dedicated, in-house security team immediately checked and confirmed that all Data Center equipment was updated, ensuring the security of customer data,” said Robert Kilian, Infinite Campus Director of Technical Operations. “We stay up-to-date on hardware and software patches and do not run outdated software versions. Security, privacy and protecting our customers’ data is our highest priority.”

Also safe were customers hosted by Campus with Campus-provided equipment in their district. A thorough review of documentation and equipment in all sites confirmed their data was not vulnerable.

Some self-hosted customers may have operating systems, servers or other networking equipment that run OpenSSL and therefore could be vulnerable. Campus advises these customers to check each device for the vulnerable versions of OpenSSL and patch as soon as possible.

Vulnerable versions of OpenSSL and what steps should be taken to mitigate the vulnerability may be found on the Heartbleed website: http://heartbleed.com. Additional information may be found on the NIST website: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0160

About Infinite Campus
For more than 18 years, Infinite Campus has successfully implemented its solutions for customers of all sizes. As the largest American-owned student information system provider, Infinite Campus manages 6.5 million students in 43 states. Infinite Campus customers range from those with fewer than 100 students to those with more than 600,000 students. Infinite Campus customers include school districts, regional consortia, state departments of education and the federal government. www.infinitecampus.com