Ernst & Young
Disclosed Jul 15, 20262 months ago10,895 affectedConfirmed
EY notifies clients of tax data theft from third-party support ticket system
Ernst & Young notified people that an unauthorized party downloaded documents from a third-party support ticket system used by its IT staff between March 28 and April 12, 2026, including personal and financial data used for tax filings. ShinyHunters later claimed the attack.
What is known
| People affected | 10,895 (as reported by the organization) |
|---|---|
| Disclosed | Jul 15, 2026 |
| Discovered | Apr 23, 2026 |
| Happened | Mar 28, 2026 |
| Attack | Vendor breach |
| Data exposed | Financial, Names, Social Security numbers, Other, Payment cards, Addresses |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Ernst & Youngoag.ca.gov · Official notice | Official notice |
| California AG breach notice: Ernst & Youngoag.ca.gov · Regulator | Regulator |
| Ernst & Young discloses data breach after support system hackbleepingcomputer.com · News | News |
| Texas Attorney General data security breach report BR-0005180: Ernst & Youngoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General breach report: Ernst & Youngago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jul 15 | |
| Vermont AGresidents of VT | Jul 16 | 13 |
| Researchtotal | Jul 17 | |
| Texas AGresidents of TX | Jul 17 | 873 |
Other breaches at Ernst & Young
| Breach | Affected | ||||
|---|---|---|---|---|---|
| MOVEit breach at EY exposes Bank of America customer dataJun 12, 20233 years agoSupply chain | Jun 12, 20233 years ago | Supply chain | Tech | Confirmed | 30K |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · data_types: ["financial","names","ssn","other"] to ["financial","names","ssn","other","payment-card","addresses"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 10895 · backfill source
- 2026-09-25 · sector: tech to finance · seed source
- 2026-09-25 · attack: unknown to third-party · seed source
- 2026-09-25 · data_types: [] to ["financial","names","ssn","other"] · seed source
- 2026-09-25 · discovered: empty to 2026-04-23 · seed source
- 2026-09-25 · summary: empty to Ernst & Young notified people that an unauthorized party downloaded documents from a third-party support ticket system used by its IT staff between March 28 and April 12, 2026, including personal and financial data used for tax filings. Shi · seed source
- 2026-09-25 · title: empty to EY notifies clients of tax data theft from third-party support ticket system · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.