Verified Breach

Apr 9, 2026 Breach Date

13,500,136 Accounts Affected

4 Data Types Exposed

Apr 15, 2026 Added to HIBP

About This Breach

In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, physical address and phone number appearing inconsistently across some records.

Compromised Data Types

Email addresses Names Phone numbers Physical addresses

Check If You Were Affected

Were you part of the McGraw Hill breach?

McGraw Hill Data Breach

Has your email been compromised?