McGraw-Hill Confirms Data Exposure, Hackers Claim 45M Salesforce Records Leaked

McGraw-Hill reported a limited internal data exposure tied to a Salesforce misconfiguration after the ShinyHunters extortion group claimed possession of up to 45 million records; the company disputes the scope and sensitivity of the data. The report highlights the distinction between a third-party SaaS configuration issue and a compromise of core systems, and provides guidance on SaaS configuration audits, access controls, and third-party risk management.