PwC confirms cybersecurity incident involving employee learning records at a third-party vendor

PwC confirmed on October 23, 2026 that it was aware of a cybersecurity incident involving a third-party vendor used to host company employee learning records. A PwC global spokesperson said the affected site does not house client data, sensitive personal data or financial information, that PwC acted promptly to secure the environment and conduct a thorough review once it learned of the incident, and that the incident does not impact PwC's network or any of its operations. PwC has not stated a record count, so this item is prepared as a Cybersecurity item, not a Breaches add.

Sourcing limitation, stated openly: this item rests on a single reporting chain, Reuters reporting on October 23, 2026, citing the PwC global spokesperson and cybercrime research platform eCrime.ch's documentation of the Everest claim. All other coverage found is Reuters syndication. The Everest extortion group claimed on October 22 to have stolen 590 gigabytes of data, including regional HR and learning exports, integration documentation, software components and PwC e-learning courses, with names, email addresses, telephone numbers and addresses among the individual details it described. PwC declined to comment on the amount of data stolen or the veracity of Everest's claims, so the 590 gigabyte figure and the claimed contents are attacker claims, not confirmed scale. This item will be updated when independent confirmation, a PwC update, or denial of those claims appears.

Sources: Reuters