A data breach at Ernst & Young was caused by unauthorized access to a third-party service management platform used to support tax-related services. The attackers had access for approximately two weeks and exfiltrated documents containing sensitive client information such as personal identifiers and financial data. EY discovered the breach through detection of anomalous activity, responded by activating incident response and remediation efforts, and engaged an external cybersecurity firm for investigation. The company has notified affected clients and is offering credit and identity monitoring services. The breach details do not include the attack method or threat actor identity, and no exploitation or misuse of the stolen data has been confirmed.

The breach exposed sensitive personal and financial information of EY clients, including names, addresses, Social Security numbers, account numbers, and credit/debit card details. This exposure increases the risk of identity theft and financial fraud for affected individuals. EY has not reported any confirmed misuse or further exposure of the data. The breach affects client confidentiality and may impact trust in EY's data handling practices.

EY has activated incident response and remediation efforts and engaged an independent cybersecurity firm to investigate the breach. Affected clients have been notified and are being provided with two years of free credit monitoring, identity monitoring, and identity restoration services. No specific remediation or patch is applicable as the breach involved a third-party platform. Organizations using third-party services should review their vendor risk management and monitor for anomalous activity. Patch status is not applicable; check vendor advisories for the third-party platform if available.