What was exposed, when it happened, and which databases confirm it.
- accounts
- 13,500,136
- Breached
- April 10, 2026
- Last Update
- April 16, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, physical address and phone number appearing inconsistently across some records.
Compromised Info
- Email addresses
- Names
- Phone numbers
- Physical addresses
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the McGrawHill breach?
The McGrawHill breach exposed: Email addresses, Names, Phone numbers, and Physical addresses.
When did the McGrawHill breach happen?
The McGrawHill breach was disclosed on April 10, 2026 and affected 13,500,136 records.
Am I affected by the McGrawHill breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the McGrawHill leak.