All breaches
McGraw Hill data breach13.5M accounts compromised on 2026-04-10
Verified
McGraw Hill (mheducation.com) was the source of a data breach dated 2026-04-10, exposing 13,500,136 accounts. The details below are mirrored from Have I Been Pwned and reflect the source's account of the incident at the time of publication.
Incident Report
| Target Organization | McGraw Hill |
|---|---|
| Source Name | McGrawHill |
| Domain | mheducation.com |
| Breach Date | 2026-04-10 |
| Added to HIBP | 2026-04-16 |
| Last Modified | 2026-04-16 |
| Accounts Compromised | 13,500,136(13.5M) |
| Data Exposed | Email addressesNamesPhone numbersPhysical addresses |
| Status | Verified by HIBP |
Description
In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, physical address and phone number appearing inconsistently across some records.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.