Data breach at edtech giant McGraw Hill affects 13.5 million accounts

ShinyHunters claimed and partially published a data breach of McGraw Hill after exploiting a Salesforce misconfiguration, distributing over 100GB of files tied to 13.5 million accounts containing PII (names, addresses, phone numbers, emails). The extortion group has targeted other organizations as well, and the exposed information increases risk of targeted phishing and further abuse.