HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

GALLATIN POINT CAPITAL LLC

bd_c6453b5bdad6bf2b · schema v1 · pii pii-v2

Severity

Medium

Discovered

Apr 23, 2026

Filed

Oct 1, 2026

To disclose

—

Affected

16state residents only

Confidence

68%

Full breach record for GALLATIN POINT CAPITAL LLC →

Gallatin Point Capital LLC notified residents of a data breach involving their personal information held by Ernst & Young LLP (EY), a third-party tax service provider. Between March 28 and April 12, 2026, an unauthorized third party accessed EY's IT support platform and downloaded documents containing client tax information, including Social Security numbers. EY discovered the anomaly on April 23, 2026, contained the incident, and engaged forensic investigators. Affected individuals are offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 26 days

Mar 28, 2026

Begins

Apr 23, 2026

Discovered

Oct 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16 affectedView incident

Name: Gallatin Point Capital LLC
norm: gallatin point capital
Domain: ey.com

Name: GALLATIN POINT CAPITAL LLC
norm: gallatin point
Industry: Financial Servicesllm

Discovered: Apr 23, 2026
Breach occurred: Mar 28, 2026 – Apr 12, 2026
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 16state-resident count only
Data types: Government IDIdentity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal law enforcement
Third party: via Ernst & Young LLP

During the incident: Initiated incident response procedure to determine nature and scope, contain, and begin remediation
Worked with an independent cybersecurity firm to investigate the incident
Confirmed that unauthorized access has been stopped and systems are secure
Notified federal law enforcement of this incident
Offering complimentary access to Experian IdentityWorks and Identity Restoration for 24 months
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1737-gallatin-point-capital-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2026
Raw hash: db43f86d29a96dad1e6b25fade45f6c04e724adaf4d4ca1182f64af71bfbc1c0

Reporting entityGallatin Point Capital LLC

Victim entityGALLATIN POINT CAPITAL LLC

Incidentdiscovered Apr 23, 2026

Stated responseInitiated incident response procedure to determine nature and scope, contain, and begin remediation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov