McGraw Hill

Disclosed Apr 14, 202613,500,136 accountsUnverified

McGraw Hill data from Salesforce misconfiguration leaked, 13.5M accounts

McGraw Hill confirmed unauthorized access tied to a Salesforce misconfiguration affecting multiple organizations, and ShinyHunters leaked over 100 GB. Have I Been Pwned counted 13.5 million accounts with names, addresses, phone numbers and emails.

What is known

People affected	13,500,136 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Apr 14, 2026
Happened	Apr 10, 2026
Attack	Exposed data
Data exposed	EmailsNamesPhone numbersAddresses
Sector	Education · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Part of	Salesforce (2026)
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: McGraw Hill

Newsbleepingcomputer.com

Data breach at edtech giant McGraw Hill affects 13.5 million accounts

Newsbleepingcomputer.com

McGraw-Hill confirms data breach following extortion threat

Notices filed

TotalApr 14

ResearchCount not stated

Accounts in the dataApr 16

Have I Been Pwned13,500,136 people

History of this record

source_type2026-09-25

aggregator to pressby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/McGrawHill to https://www.bleepingcomputer.com/news/security/mcgraw-hill-confirms-data-breach-following-extortion-threat/by seedSource

campaign2026-09-25

empty to salesforce-2026by seedSource

country2026-09-25

empty to USby seedSource

sector2026-09-25

tech to educationby seedSource

disclosed2026-09-25

2026-04-16 to 2026-04-14by seedSource

summary2026-09-25

In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt . Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Sales to McGraw Hill confirmed unauthorized access tied to a Salesforce misconfiguration affecting multiple organizations, and ShinyHunters leaked over 100 GB. Have I Been Pwned counted 13.5 million accounts with names, addresses, phone numbers and by seedSource

title2026-09-25

empty to McGraw Hill data from Salesforce misconfiguration leaked, 13.5M accountsby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about McGraw Hill