Data breach at edtech giant McGraw Hill affects 13.5 million accounts

The ShinyHunters extortion group has leaked over 100GB of data from 13.5 million McGraw Hill user accounts after breaching the educational publisher's Salesforce environment. McGraw Hill confirmed the breach, attributing it to a Salesforce misconfiguration that has reportedly impacted multiple organizations. The exposed data includes names, physical addresses, phone numbers, and email addresses. ShinyHunters had initially claimed to have stolen 45 million Salesforce records and threatened to leak them unless a ransom was paid. The group has been linked to a string of recent breaches affecting organizations including Rockstar Games, the European Commission, and Match Group.