PwC said an incident at a third-party vendor that hosts employee learning records left its network and operations unaffected, while an extortion group’s claim of data theft remained unconfirmed.
A PwC global spokesperson said the affected site held no client data, sensitive personal data or financial information. The company said it took steps to secure the environment and review the incident after learning about it.
Reuters reported that Everest posted its claim on Oct. 22, alleging it had taken 590 gigabytes of PwC data and would publish it if the group could not reach a deal. Reuters said the post displayed a five-day countdown.
Everest described the alleged files as regional human-resources and learning records, technical and integration materials, and information including personal contact details and organizational and employment histories, Reuters reported. PwC did not confirm that data had been taken and declined to comment on the claimed volume or its accuracy.
