McGraw Hill
Disclosed Apr 14, 20265 months ago13,500,136 accountsUnverified
McGraw Hill data from Salesforce misconfiguration leaked, 13.5M accounts
McGraw Hill confirmed unauthorized access tied to a Salesforce misconfiguration affecting multiple organizations, and ShinyHunters leaked over 100 GB. Have I Been Pwned counted 13.5 million accounts with names, addresses, phone numbers and emails.
What is known
| People affected | 13,500,136 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Apr 14, 2026 |
| Happened | Apr 10, 2026 |
| Attack | Exposed data |
| Data exposed | Emails, Names, Phone numbers, Addresses |
| Sector | Education · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Part of | Salesforce (2026) |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: McGraw Hillhaveibeenpwned.com · Aggregator | Aggregator |
| Data breach at edtech giant McGraw Hill affects 13.5 million accountsbleepingcomputer.com · News | News |
| McGraw-Hill confirms data breach following extortion threatbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Apr 14 | |
| Have I Been Pwnedaccounts in the data | Apr 16 | 13,500,136 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/McGrawHill to https://www.bleepingcomputer.com/news/security/mcgraw-hill-confirms-data-breach-following-extortion-threat/ · seed source
- 2026-09-25 · campaign: empty to salesforce-2026 · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to education · seed source
- 2026-09-25 · disclosed: 2026-04-16 to 2026-04-14 · seed source
- 2026-09-25 · summary: In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt . Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Sales to McGraw Hill confirmed unauthorized access tied to a Salesforce misconfiguration affecting multiple organizations, and ShinyHunters leaked over 100 GB. Have I Been Pwned counted 13.5 million accounts with names, addresses, phone numbers and · seed source
- 2026-09-25 · title: empty to McGraw Hill data from Salesforce misconfiguration leaked, 13.5M accounts · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.