The firm’s latest full-year report reveals a staff member was disciplined last year for mishandling confidential information, deepening questions about its internal culture and controls.
The annual report shows the data breach case sits among 10 staff members formally disciplined in the 2025 financial year for breaching PwC’s code of conduct. Of those 10, seven were found to have engaged in bullying, harassment or other workplace misconduct. Another two employees were found to have committed sexual harassment. PwC removed eight of the 10 staff, while the remaining two received written warnings that can include financial penalties, counselling or compulsory training.
The firm confirms it notified the Department of Finance about the latest data breach in January, which signals it treated the incident as a reportable matter to government. The range of sanctions, from termination to mandated training, shows how PwC is trying to demonstrate consequences for behaviour that violates its standards. Internal disciplinary data like this is closely watched by clients and regulators who want evidence the firm is tightening governance. It also illustrates how the tax scandal has pushed PwC to expose more of its internal misconduct record than it once did.
