PwC Confirms Data Breach by Everest Hacking Group
Article Content
- •PwC confirmed a data breach involving a third-party vendor.
- •The Everest hacking group claims to have stolen 590 GB of employee data.
- •Affected data includes HR records, training documents, and internal audit methodologies.
PwC reported a cybersecurity incident involving a third-party vendor that hosts employee learning records. The Everest hacking group claimed to have stolen approximately 590 gigabytes of data, including employee information and internal documents. The breach affects multiple PwC regional operations, including Australia, China, Canada, and the UK. PwC stated that the affected site does not contain client data or sensitive personal information. They have initiated a review and secured the environment following the incident. Everest has threatened to release the stolen data unless a deal is reached within five days. The incident was publicly acknowledged on October 22, 2026, when Everest made its claims known. PwC has not confirmed the specifics of the data stolen or the validity of Everest's claims.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track PwC in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What type of data was stolen?
Is client data affected?
What actions is PwC taking?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…