McGraw Hill Confirms Salesforce Webpage Breach; Data Tied to 13.5 Million Accounts Leaked
Summary
McGraw Hill confirmed unauthorized access to data on a Salesforce-hosted webpage. Have I Been Pwned says ShinyHunters later published over 100GB tied to 13.5 million email addresses; exposed fields included names, addresses and phone numbers.
Key points
- McGraw Hill confirmed unauthorized access to a limited set of data from a Salesforce-hosted webpage; it said a misconfiguration was involved.
- Have I Been Pwned reported that ShinyHunters published over 100GB of files tied to 13.5 million unique email addresses.
- The leaked files contained names, physical addresses and phone numbers in addition to email addresses, with some fields appearing inconsistently.
- McGraw Hill said its Salesforce accounts, courseware, customer databases and internal systems were not affected.
- ShinyHunters had claimed to have stolen 45 million Salesforce records and threatened to leak documents unless a ransom was paid.
Article Details
- Victim Organization
- McGraw Hill
- Incident Type
- Data breach involving unauthorized access to a limited set of data from a Salesforce-hosted webpage, reportedly enabled by a misconfiguration.
- Data Types Exposed
- Names
- Physical addresses
- Phone numbers
- Email addresses
- Affected Records
- Have I Been Pwned reported leaked files containing 13.5 million unique email addresses; the exposed fields varied across records. ShinyHunters separately claimed to have stolen 45 million Salesforce records.
- Affected Data Size
- More than 100GB of files, according to Have I Been Pwned.
- Operational Impact
- McGraw Hill confirmed unauthorized access to a limited set of data. It said its Salesforce accounts, courseware, customer databases, and internal systems were not affected.
- Ransom Or Extortion
- ShinyHunters reportedly threatened to leak allegedly stolen documents unless a ransom was paid; data was subsequently published. The ransom amount was not disclosed.
- Claim Status
- confirmed