ShinyHunters Claims Ernst & Young Hack
Source SecurityWeek
Description
The ShinyHunters extortion group claims responsibility for a data breach involving Ernst & Young (EY). Personal and financial information was stolen from a third-party management platform supporting EY's tax-related work. The breach occurred between March 28 and April 12, during which attackers accessed tax-related documents containing sensitive client data such as names, addresses, Social Security numbers, and financial account details. EY has notified affected individuals and is offering 24 months of credit and identity monitoring services. The company has not disclosed the number of impacted individuals or technical details about the breach. ShinyHunters has threatened to release the stolen data if EY does not respond by July 31. No patch or remediation details are available as this is a data breach incident involving a third-party platform.