Educational company McGraw Hill says Salesforce misconfiguration led to data leak

McGraw Hill reported unauthorized access to a limited set of data from a webpage hosted on Salesforce, attributed to a broader Salesforce misconfiguration that affected multiple organizations; the company says the exposed data is non-sensitive and not tied to its internal systems or customer databases. The ShinyHunters group claimed to have stolen 45 million Salesforce records and listed McGraw Hill on their leak site; Salesforce maintains there is no indication its platform was compromised and investigations are ongoing.