HackingProfessional ServicesFinancial ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIFinancial accountGovernment IDMediumContained

ERNST & YOUNG LLP

bd_0d2e166fcb18c8cf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 23, 2026

Filed

Jul 15, 2026

To disclose

10 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for ERNST & YOUNG LLP →5 incidents on file

Ernst & Young LLP (EY) disclosed a data breach involving its third-party IT service management platform. Between March 28 and April 12, 2026, an unauthorized third party accessed the platform and downloaded documents containing client personal and financial information. EY detected the incident on April 23, 2026, engaged forensic investigators, notified law enforcement, and secured its systems. Affected individuals were offered 24 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d10 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 26 days

discovery → filing · 12 weeks / 83 days

Mar 28, 2026

Begins

Apr 23, 2026

Discovered

Jul 15, 2026

Filed

vs. sector median

9 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteshinyhuntersbd_dd03905a2bb4d77f2026-07-27 · +12dVerified by operator

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_29b6b4794ab7836c2026-07-15Verified
California State AGbd_42c010b106cfcaeb2026-07-15Verified
Vermont State AGbd_e6037bfd1b169e8c2026-07-16 · +1dVerified
Nebraska State AGbd_f6da314010d1a4dd2026-07-14 · +1dCandidate

Show 1 more filing ↓up to 2d gap

Texas State AGbd_fd00b5fb305eb1e22026-07-17 · +2dVerified

Name: ERNST & YOUNG LLP
norm: ernst young
Domain: ey.com

Name: ERNST & YOUNG LLP
norm: ernst young
Domain: ey.com
Industry: Professional ServicesllmFinancial Servicesllm

Discovered: Apr 23, 2026
Breach occurred: Mar 28, 2026 – Apr 12, 2026
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 13, 2026
Affected individuals: Not disclosed
Data types: PIIFinancial accountGovernment ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified federal law enforcement of this incident
Initial access: supply_chain

During the incident: Initiated its incident response procedure
Worked with an independent cybersecurity firm to investigate the incident
Notified federal law enforcement of this incident
Offering complimentary access to two products offered by Experian: Identity Works... and Identity Restoration
Changes made: Contain it, and begin remediation and recovery efforts
Unauthorized access has been stopped, and our systems are now secure
Continue to monitor for further information associated with this incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: MA AG >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGJul 14 · first

New Hampshire State AG+1d

California State AG+1d

Massachusetts State AG+1d · this page

Vermont State AG+2d

Texas State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1146-ernst-young-llp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2026
Raw hash: 614f370466cf8bc1f02970eeb00171d78c4dabf8a1f792203ad6472a47d52f57

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityERNST & YOUNG LLP

Victim entityERNST & YOUNG LLP

Incidentdiscovered Apr 23, 2026

Stated responseInitiated its incident response procedure

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov