ShinyHunters has breached McGraw-Hill via a Salesforce environment misconfiguration, claiming possession of 45 million PII records (unverified; McGraw-Hill disputes scale) and threatening public release by reported deadline of April 14. Salesforce has publicly acknowledged an active data extortion campaign tied to environment misconfigurations, suggesting the exposure extends beyond McGraw-Hill to other Salesforce tenants. The business risk is elevated: organizations using Salesforce for customer data management face potential regulatory exposure, reputational damage, and extortion pressure if their environments share the same misconfiguration class.