Skip to content
Cyber Breaches
Search
Data breachResolved

McGraw Hill data breach (2026)

In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform".

Victim
McGraw Hill
records
13.5M
SectorEducation

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2026-04-10, McGraw Hill was affected by a data breach. Approximately 13,500,136 accounts were exposed. In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform".

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#McGrawHill
  2. mheducation.comhttps://mheducation.com

Related incidents

Data breachOngoing

FulcrumSec leaks Global Schools Foundation data, exposing 33,000+ children's and parents' passports

The extortion group FulcrumSec claimed it stole roughly 4.8 terabytes of data from Singapore-based Global Schools Foundation after exploiting database credentials left unchanged since a 2022 breach, leaking 33,088 passport numbers belonging to children and parents and around 9.4 million internal messages when ransom negotiations collapsed.

Victim
Global Schools Foundation