BreachPublished 27 Jul 2026

Ernst & Young data breach claimed by ShinyHunters extortion gang

Source Bleeping Computer

Description

The ShinyHunters extortion gang has claimed responsibility for a data breach at Ernst & Young, reportedly obtaining credentials through a supply-chain attack. The breach involves unauthorized access to some of the company's systems. No specific details about the compromised data or the extent of the breach have been provided. There is no information about patches or remediation measures. The breach has not been confirmed to have active exploits in the wild.

Impact

The breach potentially exposes Ernst & Young systems to unauthorized access, which may lead to data compromise or further exploitation. However, specific impacts such as data types affected or operational disruptions are not detailed. The claim of credential theft via supply-chain attack indicates a risk to supply-chain security and associated trust relationships.

Defensive guidance

Organizations should monitor for updates from Ernst & Young and apply any recommended security measures once disclosed. Given the nature of the breach, reviewing supply-chain security and credential management practices is advisable.

Summary

ShinyHunters, an extortion group, claims to have breached Ernst & Young by acquiring credentials via a supply-chain attack. This breach reportedly allowed unauthorized access to certain Ernst & Young systems. The details about the attack vector, compromised data types, or affected systems are not disclosed. The incident is classified as a breach based on the claim and available information.

References

bleepingcomputer.com/news/security/ernst-and-young-data-breach-claimed-by-shinyhunters-extortion-gang/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 18 Aug 2026, 11:20 UTC

References

Community reviews