Education publisher McGraw Hill misconfigured a cloud storage device, exposing the emails and grades of students across the U.S. and Canada.

A spokesperson said leaving a spreadsheet with personal information accessible to those outside the university's contact tracing team was a "regrettable error."

Law enforcement and cybersecurity firms are currently investigating to see if the student data was compromised by the vendor used in 43 states.