McGraw Hill: a data breach
In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt . Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, physical address and phone number appearing inconsistently across some records.
The record
- Organisation
- McGraw Hill →
- Identity
- McGraw Hillidentified by its domain in a verified breach record
- Records affected
- 13,500,136 records
- Data exposed
- Email addresses, Names, Phone numbers, Physical addresses
- Sector
- Not recorded
- Occurred
- 2026-04-10
- Disclosed
- 2026-04-16
- First recorded here
- 2026-09-09
Fastnexa security experts
Worried the same could happen to your company?
If you are a customer or supplier of McGraw Hill, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-04-16