Everest claims 590 GB PwC data theft; listing unverified
October 23 reports add a container-count split—Cyber Security News says 1,333 archives, GBHackers 1,386 with 19,324 files—and an unconfirmed October 28 publication deadline.
Everest’s leak-site claim of about 590.69 GB of PwC data remains unverified, and PwC has not responded.
The Everest ransomware group listed PwC on its leak site on October 22, 2026, claiming it stole 590.69 GB, including HR records, training materials, and internal documents. Hackmanac and monitoring services documented the listing, which cites 108,426 files, 494 directories, and Cornerstone OnDemand material from pwc-stg.csod.com; one alleged HR dataset has 213,084 records spanning Australia, China, Canada, and the UK. Cyber Security News reports 1,333 original archive containers, while GBHackers counts 1,386 archive containers with 19,324 files. According to Crypto India, the files include SSO source code and audit documents. No ransom, access method, encryption, or independent confirmation is established, and PwC had not responded. A claimed publication deadline around October 28 is not independently confirmed.
- Leak-site listing dated October 22, 2026; PwC had not responded.
- Claim covers 590.69 GB and 108,426 files across 494 directories.
- Alleged HR set of 213,084 records covers Australia, China, Canada, and the UK.
- Screenshot names pwc-stg.csod.com and Cornerstone OnDemand learning materials.
- Cyber Security News reports 1,333 archives; GBHackers reports 1,386.
- No encryption, ransom, access path, or usable passwords or tokens shown.
Timeline
dated events in the reporting · oldest first- Oct 22, 2026Everest listed PwC claiming theft of 590.69 GB · Cyber Security News
What each outlet adds
beyond the shared facts- Cyber Security NewsReports 1,333 archive containers and an unconfirmed October 28 deadline.
- GBHackersCounts 1,386 archives with 19,324 files and cites Crypto India.
- Vendors
- Cornerstone OnDemand
- Products
- Cornerstone OnDemand
- Threat actors
- Everest
- Victims
- PwC
- Countries
- AustraliaChinaCanadaUnited Kingdom
Coverage
oldest first · one row per article · UTC- · 8d ago
Cyber Security NewsFirst report
Everest claims it stole 590 GB from PwC; firm has not confirmed
Hackmanac reported 108,426 files and one HR set of 213,084 records, but those figures are unverified.
- · 8d ago
GBHackers
Everest claims 590GB theft from PwC learning systems
The unverified listing cites 108,426 files and a roughly five-day publication countdown; encryption is not shown.