PwC confirms cybersecurity incident involving employee learning records

Reuters reports that a PwC global spokesperson said "the affected site does not house client data, sensitive personal data or financial information."[1] The spokesperson told Reuters that once the firm learned of the incident, it "acted promptly to secure the environment and conduct a thorough review."[1]The incident "does not impact our network or any of our operations," the spokesperson said[1], according to Reuters.Reuters reports that a cyber extortion group called "Everest" claimed responsibility for the data breach in a message posted to its website October 22, according to cybercrime research platform eCrime.ch.[1] According to Reuters, the message included a countdown timer with five days remaining, and a message indicating the data would be released if a deal could not be reached.[1]Analytics Insight reports that the group claimed the data included regional human resources and learning records, integration documentation, software components and PwC e-learning courses.[2] The outlet says Everest also claimed the files held names, email addresses, phone numbers and physical addresses, but adds that these details remain allegations by the group and have not been independently verified.[2]The420.in reports that PwC has not yet publicly disclosed which vendor operated the platform, how attackers gained access or how many employee records may have been involved.[3] The outlet also says that "the investigation remains ongoing."[3]