Threatline

McGraw Hill - 13,500,136 breached accounts

In April 2026, education company . Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, physical address and phone number appearing inconsistently across some records. McGraw Hill confirmed a data breach following an extortion attempt