ShinyHunters Claim McGraw Hill Salesforce Data Compromised, Demand Payment
Summary
ShinyHunters claim McGraw Hill had over 45 million Salesforce records containing PII compromised and demand payment to prevent a leak. The monitoring post says the claim is unconfirmed.
Key points
- The post attributes the claim to ShinyHunters and identifies McGraw Hill as the victim.
- The group claims over 45 million Salesforce records containing personally identifiable information were compromised.
- The claim threatens to leak the data unless McGraw Hill pays; the post gives April 14, 2026 as the contact deadline.
- The monitoring post says it cannot confirm the claim's accuracy.
Article Details
- Victim
- McGraw Hill, Inc.
- Victim Domain
- mheducation.com
- Attack Date
- 2026-04-11
- Claim Date
- 2026-04-11
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Unknown; ShinyHunters claim records were compromised, but the source does not confirm exfiltration.
- Exfiltrated Data
- ShinyHunters claim that over 45 million Salesforce records containing PII were compromised; this claim is unverified.
- Exfiltrated Size
- Unknown
- Ransom Demand
- ShinyHunters demand payment or threaten to leak the data; no amount is disclosed.
- Leak Status
- Threatened; the source reports no leak.