ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

ShinyHunters has claimed responsibility for a data breach at professional services firm Ernst & Young (EY), threatening to publish stolen files unless the company contacts the group by July 31, 2026.

The extortion group added EY to its dark web leak site on July 27 with the message, “Yes it was us. Now come talk to us.” It said the company had until the end of July to respond before the data was released and further unspecified disruption followed.

EY Detected the Breach in April

EY had already confirmed a breach earlier in July, but it did not identify the attacker. According to a notification (PDF) filed with the California Attorney General, the company detected unusual activity on April 23 within a third-party IT service management platform used by its personnel to support tax-related client work.

An investigation found that an unauthorized party accessed the platform between March 28 and...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE