Security team in an Orange County office reviewing a data protection briefing on a wall screen

PwC Data Breach Claim: Everest Ransomware Group Says It Stole 590 GB of HR and Training Data

This Friday news brief examines the PwC data breach claim made by the Everest ransomware group, which says it holds 590 GB of human resources records, training materials, and single sign-on configuration files taken from a Cornerstone OnDemand staging environment. The claim is unverified and PwC has not responded. Written for business owners, operations leaders, and IT decision-makers throughout Orange County and Irvine, the brief explains what was alleged, why the reported record and file counts should not be read as confirmed numbers of affected people, and why a staging hostname changes the likely story. It sets out how to read any leak-site claim without over- or under-reacting, what HR and learning platforms expose to attackers, and a practical seven-step review of HR, learning, and test environments that organisations can complete this month before a listing ever names them. ... Read More