McGraw-Hill confirms data breach following extortion threat

McGraw-Hill confirmed unauthorized access to a limited set of data on a Salesforce-hosted webpage after a Salesforce misconfiguration, while extortion group ShinyHunters claims to hold 45 million records and threatened to publish them; McGraw-Hill says no sensitive customer, student, SSN, or financial data were exposed and has secured the affected pages and is working with Salesforce and external experts.