ERNST & YOUNG LLP

Ernst & Young LLP (EY US) notified the Delaware Attorney General on August 30, 2023, of a security incident involving its third-party supplier, Progress Software. A vulnerability in Progress Software's MOVEit Transfer file transfer solution compromised files containing personal data of 2,408 Delaware residents. Data potentially exposed includes names, addresses, financial account information, credit/debit card numbers, Social Security numbers, and government-issued IDs. EY US began mailing notifications on August 9, 2023, and offered 24 months of credit monitoring via Experian. Bank of America, an EY client, was not impacted.