PwC confirms learning records breached in vendor site attack
PwC confirmed that learning records were exposed in an attack on a vendor's website. The confirmation followed a claim by a known ransomware actor. Organizations using these trainings should check with PwC whether their records were affected.
What happened
PwC confirmed that learning records were breached in an attack on a vendor's website. The confirmation came after a known ransomware actor claimed the incident.
Why it matters
Learning records of a major professional services firm were exposed through a third party, highlighting vendor risk. The exact content of the records was not detailed in the sources.
What to do
Check with PwC and the vendor whether your organization's records are affected. Review access and contracts with training vendors.
For the technical team
- Affected
- Site de fornecedor da PwC (registros de treinamento) · PwC vendor site (learning records). Versions not applicable.
- Exploitation
- A known ransomware actor claimed the attack, per Cybersecurity Dive. PwC confirmed the learning records breach.
- Fix
- No software to update
- Vector
- Attack on a PwC vendor's website. Technical vector and exploitation conditions were not disclosed in the sources.
- More details
- Reported by Cybersecurity Dive. The sources do not name the ransomware group or provide data volume, dates, or indicators of compromise.
Timeline
Incident opened.
Sources 1 source
- PwC confirms learning records breached in attack on vendor site Cybersecurity Dive
