McGraw-Hill Confirms Limited Data Access After Salesforce Misconfiguration
Summary
McGraw-Hill says a Salesforce misconfiguration led to unauthorized access to limited data on a hosted webpage. It says core systems and customer databases were untouched; ShinyHunters claims to hold 45 million records, contradicting the company's account.
Key points
- McGraw-Hill reported unauthorized access to limited data on a Salesforce-hosted webpage, which it attributed to a misconfiguration in Salesforce's environment.
- The company said its Salesforce accounts, customer databases, courseware and internal systems were not accessed.
- McGraw-Hill said the exposed information was limited and non-sensitive, with no Social Security numbers, financial account information or student data.
- ShinyHunters claims it holds 45 million Salesforce records containing personal information and threatened to leak data unless a ransom was paid; this claim conflicts with McGraw-Hill's account.
- McGraw-Hill said it secured the affected webpages and is working with Salesforce and external cybersecurity experts to strengthen protections.
Article Details
- Victim Organization
- McGraw-Hill
- Incident Type
- Unauthorized access to a limited webpage hosted on Salesforce following a Salesforce platform misconfiguration.
- Data Types Exposed
- Limited, non-sensitive data from a webpage; specific data types were not disclosed. McGraw-Hill stated the exposed information did not include Social Security numbers, financial account information, or student data.
- Affected Records
- Unknown; ShinyHunters claimed to hold 45 million Salesforce records, a claim not confirmed by McGraw-Hill and inconsistent with its account of limited, non-sensitive exposure.
- Operational Impact
- McGraw-Hill said its Salesforce accounts, customer databases, courseware, and internal systems were not accessed. The affected webpages were secured; no other operational impact was reported.
- Ransom Or Extortion
- ShinyHunters threatened to leak data by April 14 unless a ransom was paid. The claimed data theft and volume were not confirmed by McGraw-Hill.
- Claim Status
- confirmed