PwC Data Breach Claim: Everest Ransomware Group Says It Stole 590 GB of HR and Training Data
This episode examines the Everest ransomware group’s claim to have stolen 590 GB of PwC human resources, training, and single sign-on configuration data from a Cornerstone OnDemand staging environment. The claim is unverified and PwC has not responded. The discussion covers what was alleged, why the record and file counts should not be read as confirmed numbers of people, why a staging hostname changes the likely story, and what Everest’s history of both extortion and encryption means for interpreting a leak-site listing. Listeners will hear a practical checklist for reading any data-theft claim, an explanation of what HR and learning platforms expose to attackers, and a seven-step review Orange County businesses can run on their own HR, learning, and test environments this month. The brief closes with the signals to watch as the story develops.
