Everest claims it stole 590 GB from PwC; firm has not confirmed
Original title: PwC Data Breach Claim – Everest Ransomware Group Claims to Have Stolen 590 GB of Data
Hackmanac reported 108,426 files and one HR set of 213,084 records, but those figures are unverified.
The Everest ransomware group listed PwC on its leak site on October 22, 2026, claiming it stole 590.69 GB, including HR records, training materials, and internal documents. Hackmanac and CTIWatch documented the listing; neither is independent proof of a breach. A screenshot names pwc-stg.csod.com and Cornerstone OnDemand materials. No ransom amount, access method, or encryption of PwC systems has been established, and PwC had not responded.
Unconfirmed: Everest’s theft claim is unverified, and PwC has not confirmed a breach.
- The alleged data spans PwC operations in Australia, China, Canada, and the UK.
- The listing cites 494 directories and 1,333 original archive containers.
- A reported October 28 publication deadline is not independently confirmed.
- The material does not show whether usable passwords or tokens are present.
Impact: alleged theft of HR, training, and internal documents
- Products
- Cornerstone OnDemand
- Threat actors
- Everest
- Victims
- PwC
- Countries
- AustraliaChinaCanadaUnited Kingdom
From the original article
2 min read at cybersecuritynews.com
The Everest ransomware group claims to have stolen 590. 69 GB of data from PwC, the global professional services firm. This alleged data theft includes human resources records, training materials, and internal documents.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.