Oh no, hackers have swiped oodles of slides!
PwC has confirmed that a third-party vendor it uses for employee records has been breached after a “cyber extortion group” said they got their hands on 590 GBs of learning records and other HR data, data the group is threatening to leak if a deal isn’t struck. Forgive us if we aren’t willing to go wading around on the dark web looking for the post, we’re going to have to go off Reuters instead:
A cyber extortion group called “Everest” claimed responsibility for the data breach in a message posted to its website October 22, according to cybercrime research platform eCrime.ch. The message included a countdown timer with five days remaining, and a message indicating the data would be released if a deal could not be reached.
Everest claimed to have stolen 590 gigabytes of data that included “regional HR and learning exports, integration documentation, software components and PwC e-learning courses.”
The data contains information “about individuals and their organisational and employment history,” Everest said, including names, email addresses, telephone numbers, addresses and other details.
PwC said that the breached site “does not house client data, sensitive personal data or financial information” and that they acted quickly to secure the environment once they were aware of the incident.
Elsewhere on the internet, @H4ckmanac said the breach includes data from “Australia, China, Canada, and the UK, with one HR dataset reportedly containing 213,084 records.”
The breached vendor has not yet been named.
