PWC confirms data breach involving employee learning records

UK-based professional services company PwC has confirmed it is investigating a cybersecurity incident involving a third-party vendor that hosts employee learning records, after a ransomware group claimed it stole 590GB of data.

The hacker group, known as Everest, claimed responsibility for the breach in an online post on 22 October, displaying a five-day countdown timer threatening public disclosure if negotiations fail. The group said the compromised files include regional HR and learning exports, software components, e-learning courses, and integration documentation. Everest alleged the cache contains employee work history details, including names, email addresses, telephone numbers, and physical addresses.

A PwC spokesperson said the firm acted promptly to secure the affected environment and conduct a thorough review after being notified of the incident. The firm confirmed that the breach does not impact internal PwC networks or corporate operations, adding that the vendor platform does not store client records, sensitive personal data, or financial details. 

Training Announcement: The BCS Practitioner Certificate in Information Risk Management (PCIRM) is an advanced-level programme for data specialists who actively monitor and minimise the risk of cyberattacks, information security incidents, and data protection violations. Find out more.