Latest / Tech Talks With Kinsoft
McGraw Hill – 13.5M Exposed via Salesforce Misconfig
Edtech giant McGraw Hill confirmed a breach (dated around 10 April 2026, surfacing mid-April) after ShinyHunters' extortion threat; about 13.5 million accounts were exposed — emails, names, phone numbers and physical addresses — via a Salesforce misconfiguration. When negotiations failed, the group published over 100 GB of data. McGraw Hill said the exposed data was limited and did not include Social Security numbers, financial information or student data from its learning platforms. We discuss misconfiguration risk and the limits of non-sensitive data.Need a configuration and exposure review…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.