Breaches and incidentsBriefReported by a reputable outlet, citing the company
Ernst & Young: third-party IT support ticket system accessed, tickets with client tax data downloaded
EY’s notice: an unauthorized party accessed a third-party support ticket system used by EY IT staff between 28 Mar and 12 Apr 2026 and downloaded documents.
- Disclosed
What happened
- EY’s notice: an unauthorized party accessed a third-party support ticket system used by EY IT staff between 28 Mar and 12 Apr 2026 and downloaded documents; tickets may have contained client tax filing data including personal and financial information. Count not disclosed.
- Root cause: not disclosed; vendor not named.
- No group claimed it at first; ShinyHunters later claimed an EY breach (BleepingComputer, 27 Jul).
- 24 months of Experian monitoring; law enforcement notified.
Sources
- https://www.bleepingcomputer.com/news/security/ernst-and-young-discloses-data-breach-after-support-system-hack/
- https://www.bleepingcomputer.com/news/security/ernst-and-young-data-breach-claimed-by-shinyhunters-extortion-gang/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.