Data breach at edtech giant McGraw Hill affects 13.5 million accounts

The ShinyHunters extortion group breached McGraw Hill's Salesforce environment and subsequently leaked data affecting 13.5 million user accounts. This significant data breach exposed sensitive user information, which was released as part of an extortion scheme. Organizations using Salesforce or similar SaaS platforms should ensure robust security configurations, monitor for unauthorized access, implement multi-factor authentication, and regularly audit access logs to prevent similar attacks. Affected users should be notified and advised to monitor for phishing attempts and consider credential changes if reuse occurred.

The ShinyHunters extortion group has leaked data from 13.5 million McGraw Hill user accounts, stolen after breaching the company's Salesforce environment earlier this month. [...]

The ShinyHunters extortion group breached McGraw Hill's Salesforce environment and subsequently leaked data affecting 13.5 million user accounts. This significant data breach exposed sensitive user information, which was released as part of an extortion scheme. Organizations using Salesforce or similar SaaS platforms should ensure robust security configurations, monitor for unauthorized access, implement multi-factor authentication, and regularly audit access logs to prevent similar attacks. Affected users should be notified and advised to monitor for phishing attempts and consider credential changes if reuse occurred. The ShinyHunters extortion group has leaked data from 13.5 million McGraw Hill user accounts, stolen after breaching the company's Salesforce environment earlier this month. [...] The ShinyHunters extortion group has leaked data from 13.5 million McGraw Hill user accounts, stolen after breaching the company's Salesforce environment earlier this month. [...]