Skip to content

McGraw Hill

Disclosed Apr 14, 20265 months ago13,500,136 accountsUnverified

McGraw Hill data from Salesforce misconfiguration leaked, 13.5M accounts

McGraw Hill confirmed unauthorized access tied to a Salesforce misconfiguration affecting multiple organizations, and ShinyHunters leaked over 100 GB. Have I Been Pwned counted 13.5 million accounts with names, addresses, phone numbers and emails.

What is known

People affected13,500,136 (accounts in the leaked data, per Have I Been Pwned)
DisclosedApr 14, 2026
HappenedApr 10, 2026
AttackExposed data
Data exposedEmails, Names, Phone numbers, Addresses
SectorEducation · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Part ofSalesforce (2026)
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: McGraw Hillhaveibeenpwned.com · Aggregator
Data breach at edtech giant McGraw Hill affects 13.5 million accountsbleepingcomputer.com · News
McGraw-Hill confirms data breach following extortion threatbleepingcomputer.com · News

Notices filed

WhereFiledPeople
ResearchtotalApr 14
Have I Been Pwnedaccounts in the dataApr 1613,500,136
History of this record
  • 2026-09-25 · source_type: aggregator to press · seed source
  • 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/McGrawHill to https://www.bleepingcomputer.com/news/security/mcgraw-hill-confirms-data-breach-following-extortion-threat/ · seed source
  • 2026-09-25 · campaign: empty to salesforce-2026 · seed source
  • 2026-09-25 · country: empty to US · seed source
  • 2026-09-25 · sector: tech to education · seed source
  • 2026-09-25 · disclosed: 2026-04-16 to 2026-04-14 · seed source
  • 2026-09-25 · summary: In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt . Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Sales to McGraw Hill confirmed unauthorized access tied to a Salesforce misconfiguration affecting multiple organizations, and ShinyHunters leaked over 100 GB. Have I Been Pwned counted 13.5 million accounts with names, addresses, phone numbers and · seed source
  • 2026-09-25 · title: empty to McGraw Hill data from Salesforce misconfiguration leaked, 13.5M accounts · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about McGraw Hill

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.