ShinyHunters claim that McGraw Hill, Inc. (mheducation.com) in the United States has compromised over 45 million Salesforce records containing PII, with a ransom demand to pay or leak. This is a final warning to contact by 14 Apr 2026 to prevent leakage and the ensuing digital problems #UnitedStates
Incident Details
- Victim: McGraw Hill, Inc. (mheducation.com)
- Sector: Education
- Country: US
- Actor: shinyhunters
- Source:
- Discovered: 2026-04-12 02:10:02.546277
- Published: 2026-04-11 11:10:00.000000
Information
- Threat actor: ShinyHunters
- Over 45 million Salesforce records containing PII have been compromised
- Demand: pay or the data will be leaked
- Final warning to reach out by 14 Apr 2026 or the data will be leaked along with additional digital disruptions
- Updated: 11 Apr 2026
- Warning: FINAL WARNING — PAY OR LEAK
- Message: “Make the right decision, don’t be the next headline”
Disclaimer: This post is based on public claims made by the ransomware group "shinyhunters". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.