EY Data Breach – Hackers Access Third-Party IT Support Platform and Steal Client Tax Documents

Ernst & Young disclosed a data breach where an unauthorized third party breached a third‑party IT service management platform used by its tax practice, accessed and exfiltrated support‑ticket attachments containing clients’ personal identifiers and tax/financial data; EY discovered anomalous activity on April 23, 2026 (access likely began between March 28–April 12), engaged third‑party forensics, notified law enforcement and affected individuals, and is offering 24 months of identity monitoring and restoration services.