McGraw-Hill Data Breach Investigation
Chimicles Schwartz Kriner & Donaldson-Smith LLP is investigating potential class action claims against McGraw-Hill, Inc. following a reported data security incident that may have exposed the personal information of an undetermined number of individuals.
What Happened?
McGraw-Hill recently confirmed that hackers gained unauthorized access to a limited set of data from a webpage hosted by Salesforce on its platform. McGraw-Hill stated that the incident appears to be part of a broader misconfiguration issue within Salesforce’s environment affecting multiple organizations.
The incident came to light after the threat group ShinyHunters listed McGraw-Hill on its dark web portal and claimed to have stolen more than 45 million Salesforce records unless a ransom was paid. McGraw-Hill disputes that characterization and says the exposed data was limited and non-sensitive.
McGraw-Hill also stated that the affected webpages were secured after the unauthorized activity was detected and that it is working with Salesforce and outside cybersecurity experts to address the issue.
What Information Was Compromised?
According to McGraw-Hill, its investigation found that the exposed information did not include Social Security numbers, financial account information, or student data from its educational platforms.
However, ShinyHunters claims the stolen data includes personally identifiable information contained in more than 45 million Salesforce records. At this time, the precise categories of information allegedly exposed have not been independently verified.
Why Is This Important?
A data breach involving personally identifiable information can create a risk of phishing, fraud, and other misuse of personal data. Although McGraw-Hill has disputed the scope of the incident, the full nature of the exposed information has not yet been publicly established.
What Should You Do?
If you received a notice from McGraw-Hill, or believe your information may have been impacted, you may contact our data breach attorneys by completing the form below to learn more about your potential legal rights and our ongoing investigation.
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.



