Vendor incident confirmed
PwC acknowledged a cybersecurity incident involving a third-party vendor used to host company employee learning records. A global spokesperson for the firm stated that the affected site does not house client data, sensitive personal data, or financial information, and that the incident does not impact the company network or operations.
Extortion group claims
The acknowledgment followed claims by a cyber extortion group known as 'Everest', which stated it had stolen 590 gigabytes of data including regional HR and learning exports, integration documentation, software components, and e-learning courses. The PwC spokesperson declined to comment on the volume of data stolen or the claims made by the group.