ERNST & YOUNG LLP
bd_f6da314010d1a4dd · schema v1 · pii pii-v2
Full breach record for ERNST & YOUNG LLP →5 incidents on fileErnst & Young LLP (EY) disclosed a data breach affecting clients of its tax services. Between March 28 and April 12, 2026, an unauthorized third party accessed a third-party IT service management platform and downloaded client documents containing personal and financial information. EY discovered the activity on April 23, 2026, engaged forensic investigators, and notified law enforcement. The incident is contained. Affected individuals were offered 24 months of Experian Identity Works monitoring. No specific targeting was indicated.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 28, 2026
Begins
Apr 23, 2026
Discovered
Jul 14, 2026
Filed
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteshinyhuntersbd_dd03905a2bb4d77f2026-07-27 · +13dVerified by operator
Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_0d2e166fcb18c8cf2026-07-15 · +1dVerified
- New Hampshire State AGbd_29b6b4794ab7836c2026-07-15 · +1dVerified
- California State AGbd_42c010b106cfcaeb2026-07-15 · +1dVerified
- Vermont State AGbd_e6037bfd1b169e8c2026-07-16 · +2dVerified
Show 1 more filing ↓Show fewer ↑up to 3d gap
- Texas State AGbd_fd00b5fb305eb1e22026-07-17 · +3dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.