Ernst & Young LLP notified customers of a data breach involving personal data handled for Bank of America. On May 31, 2023, EY was informed by third-party supplier Progress Software Corporation of a security vulnerability in the MOVEit Transfer solution. The breach window is May 27-31, 2023. Affected data may include names, addresses, financial account information, credit/debit card numbers, and SSNs. EY engaged third-party security experts and is offering two years of identity theft protection via Experian.