Ernst & Young reveals data breach following hack on support system

https://cdn.mos.cms.futurecdn.net/GJ8T4oA8G7TYJwTEhkwJAF-2560-80.jpg
  • Ernst & Young confirms breach via a third‑party IT service management platform, exposing client tax data between March 28 and April 12, 2026
  • Attackers accessed documents tied to tax support tickets; exact scope and affected clients remain undisclosed, with no dark web leaks or group claims so far
  • EY activated incident response, secured systems, and is offering 24 months of Experian identity monitoring to impacted customers

Ernst & Young (EY) has confirmed suffering a cyberattack in which it lost sensitive customer information, including tax data.

In a data breach notification letter sent to affected individuals, the firm said that on April 23, 2026, it spotted “anomalous activity” within a third-party platform its IT team uses. This is an IT service management platform that helps EY staff support the teams that perform tax-related work for clients. Therefore, the tickets submitted through this platform sometimes also contain documents with client tax information...

Copyright of this story solely belongs to techradar.com. To see the full text click HERE