- Ernst & Young confirms breach via a third‑party IT service management platform, exposing client tax data between March 28 and April 12, 2026
- Attackers accessed documents tied to tax support tickets; exact scope and affected clients remain undisclosed, with no dark web leaks or group claims so far
- EY activated incident response, secured systems, and is offering 24 months of Experian identity monitoring to impacted customers
Ernst & Young (EY) has confirmed suffering a cyberattack in which it lost sensitive customer information, including tax data.