< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 4 sources · 3 days · First seen · Last updated

PwC cybersecurity incident involving third-party vendor

Overview

PricewaterhouseCoopers (PwC) confirmed a digital security incident involving a third-party vendor used to host employee training and learning records.

The incident follows claims by a hacking group known as ‘Everest,’ which asserted it stole approximately 590 gigabytes of data. The group alleged the stolen information included software components, e-learning courses, and personal details such as names, email addresses, phone numbers, and professional histories. The group issued a warning that the data would be released unless a settlement was reached.

PwC stated that the affected location ‘does not store client data, confidential personal data, or financial information’ and emphasized that the incident ‘does not affect our network or any of our operations.’ The company has taken steps to secure the environment and is conducting a thorough analysis.

Entities

Everest · PwC · PricewaterhouseCoopers

Timeline

  1. [TECHNOLOGY] 2 sources
    PwC confirms cybersecurity incident involving third-party vendor

    PwC confirmed a cybersecurity incident involving a third-party vendor hosting employee learning records, following claims by the Everest group of a 590GB data theft.

  2. [TECHNOLOGY] 2 sources
    PwC confirms security incident involving employee training data

    PwC confirmed a security breach via a third-party vendor hosting employee training records after the “Everest” hacking group claimed to have stolen 590GB of data.

Sources

gipfeli.ch · gulfnews.com · infomoney.com.br · mobile.valor.com.br