Latest / Tech Talks With Kinsoft
McGraw Hill – 13.5M Exposed via Salesforce Misconfig
Got something to say to this podcast? Send a voicemail, and you might hear yourself on the next episode!
Edtech giant McGraw Hill confirmed a breach (dated around 10 April 2026, surfacing mid-April) after ShinyHunters' extortion threat; about 13.5 million accounts were exposed — emails, names, phone numbers and physical addresses — via a Salesforce misconfiguration. When negotiations failed, the group published over 100 GB of data. McGraw Hill said the exposed data was limited and did not include Social Security numbers, financial information or student data from its learning platforms. We…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.