PwC Suffers Data Breach Via Third-Party Vendor
The accounting firm reports that employee information was accessed by an outside vendor during a security incident.
Updated on Oct. 23, 2026 in Cybersecurity
Live Poll
Do you trust large companies to effectively secure your personal employment and contact information?
PwC confirmed a cybersecurity incident involving a third-party vendor that stored internal employee learning records. The cyber extortion group Everest claims to have stolen 590 gigabytes of data from the system.
Why it matters
The breach highlights the risks associated with third-party vendors and the potential exposure of sensitive employee information. PwC emphasized that its primary corporate network and client data remained secure throughout the incident.
The incident involved 590 gigabytes of stolen data, including HR exports, software components, and e-learning courses. PwC reports that the compromised files contained employee names, emails, phone numbers, and employment histories.
The players
PwC
PwC is a multinational professional services network that provides audit, tax, and consulting services to clients around the globe.
Everest
Everest is a cyber extortion group known for claiming responsibility for data breaches and threatening the release of stolen digital assets.
The details
PwC took immediate action to secure the vendor environment after discovering the unauthorized access and is currently conducting a formal review of the third-party infrastructure. The extortion group Everest has threatened to release the stolen records if their demands are not met.
Timeline
October 22, 2026: The Everest group posted a claim of responsibility on their website.
October 23, 2026: PwC confirmed the cybersecurity incident.
The Tech Race
This breach follows a pattern of supply chain vulnerabilities popularized by the 2020 SolarWinds attack. It serves as a reminder that enterprise security is only as strong as the third-party vendors integrated into the corporate ecosystem.
Employees whose data was stored in the vendor system may face a higher risk of phishing or identity theft attempts due to the exposure of their contact details. Individuals should monitor their personal accounts for suspicious activity following the disclosure of this breach.
The takeaway
Organizations must rigorously vet the security protocols of every third-party vendor to prevent unauthorized access to sensitive internal data. Employees should remain vigilant against unsolicited communications using their personal information as these records are often used for social engineering.
What happens next
The Everest group has set a deadline for data release, with 5 days remaining for a potential deal to be reached.
Further reading
For more information on current digital threats, visit our Cybersecurity section.
Live Poll
Do you trust large companies to effectively secure your personal employment and contact information?
