Data breach
McGraw Hillmheducation.com
13 500 136 accounts exposed in a breach dated 2026-04-10.
Breached2026-04-10Added to HIBP2026-04-16 UTCUpdated by HIBP2026-04-16 UTCAccounts13 500 136Domainmheducation.com
Verified
What happened in Have I Been Pwned’s words
In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, physical address and phone number appearing inconsistently across some records.
Exposed data as HIBP classifies it
- Email addresses
- Names
- Phone numbers
- Physical addresses
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC