Professional services firm PwC has confirmed a cybersecurity incident involving a third-party vendor that hosts employee learning records. The announcement came a day after the cyber extortion group Everest claimed it stole 590 gigabytes of company data and threatened to release it unless its demands were met.
PwC said it responded promptly after learning about the incident and secured the affected environment. The company also stressed that the incident had not affected its internal network or business operations.
A PwC global spokesperson said the affected website did not store client data, sensitive personal information, or financial records. The company said it had launched a thorough review after becoming aware of the security issue.
However, PwC has not confirmed how much information may have been accessed or whether Everest's data theft claims are accurate. The company declined to comment on the hacking group's reported figure of 590GB.
The incident involves a third-party platform that hosts employee learning records. While PwC has sought to reassure clients about the incident's scope, it has not disclosed further details about the vendor's systems or the investigation.
Everest claimed responsibility for the alleged breach in a post published on its website on October 22, according to cybercrime research platform eCrime.ch. The group said the information included regional human resources and learning records, integration documentation, software components and PwC e-learning courses. It also claimed the files contained information about individuals and their employment history, including names, email addresses, telephone numbers and physical addresses.
These details remain allegations by the group and have not been independently verified. Everest's post reportedly included a countdown timer showing five days remaining before the data could be released. The message indicated that publication could follow if the group failed to reach an agreement with the company.
Also Read: Capcom Breach Exposes Data Linked to 11.77 Million CAPCOM ID Accounts
The incident highlights the cybersecurity risks organizations face when relying on external vendors to manage employee information and internal resources. Third-party platforms can become potential entry points for attackers seeking access to business-related data. Even if core corporate systems remain unaffected, an incident involving employee records can raise privacy and information security concerns.
For now, PwC has confirmed the incident but has not verified the alleged volume or contents of the stolen data. The investigation will need to establish what happened, what information may have been exposed, and whether any further action is necessary.