McGraw Hill misconfiguration leaks about 13.5 million email addresses
Data was stolen and then published through a misconfiguration in the Salesforce environment of education company McGraw Hill. According to an analysis by Have I Been Pwned, the published data included about 13.5 million unique email addresses and some names, addresses and phone numbers. McGraw Hill confirmed the data breach after being extorted.
Key facts
- Affected organisation
- McGraw Hill
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- About 13.5 million unique email addresses and some names, addresses and phone numbers
- Cause / method
- Misconfiguration of the Salesforce environment
- Location
- United States
If your data was exposed
Exposed dataNamePhone numberEmailAddress
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- McGraw Hill confirmed the data breach after being extorted.
- The cause of the data leak was confirmed to be a misconfiguration of the Salesforce environment.
- About 13.5 million unique email addresses and some personal information were identified in the published data.
5 related reports
- McGraw-Hill confirms data breach following extortion threat
- McGraw Hill Data Breach Caused by Salesforce Misconfiguration
- Educational company McGraw Hill says Salesforce misconfiguration led to data leak
- McGraw-Hill Salesforce Data Breach 2026: Analysis of ShinyHunters Extortion and Cloud Misconfiguration Risks
- Data breach at edtech giant McGraw Hill affects 13.5 million accounts
Other incidents at McGraw Hill
Data of more than 90,000 users of McGraw Hill third-party supplier exposed
90kImpact: Information on more than 90,000 users of a third-party supplier
Information on more than 90,000 users of a McGraw Hill third-party supplier was exposed on a web forum. The date of the incident and the specific response measures have not been confirmed.
Read on www.vpnmentor.com ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.