2026 PwC (UK) — Everest leak-site claim: 590.69 GB / 108,426 HR and learning files (unverified)
Data compromised
Claimed by Everest, unverified: about 590.69 GB across 108,426 files from internal HR and learning systems, including employee details, employment and training records. Reports tie the material to a learning-platform staging directory and to several regional PwC operations; none of that is confirmed.
Technical writeup
Unverified claim. Everest added PwC to its leak site on Oct 22, 2026, listing the victim country as the United Kingdom. Threat-intelligence sources (Hackmanac, FalconFeeds, HackNotice) report the claimed volume and file count, and FalconFeeds says the group intends to publish within 5–6 days. PwC has not publicly confirmed an incident, and no samples or independent verification had been published at the time of writing. The claim names no specific PwC member firm, and the regional scope is an inference from the claimed files. Per our confirmed-only rule for ransomware, this entry should be updated to confirmed, or removed, once PwC responds. companyConfirmed false; recordsAffected 0 (files, not records).
Root cause
Unknown. The Everest group listed PwC on its leak site with the victim country given as the United Kingdom. No attack method has been described.