Cybersecurity Dive reports that PwC, a major professional services firm, confirmed a ransomware actor accessed its learning records through a breach on a vendor site. The incident has been publicly claimed by a known ransomware group, according to the publication.
This incident draws attention to the risks posed by third-party vendors in handling sensitive data. For banks, insurers, and healthcare organisations, the breach shows the need for strong oversight of external partners and clear protocols for responding to cyber incidents.
