Ernst & Young discloses data breach after support system hack

Ernst & Young disclosed that a third-party support ticket system used by its IT staff was compromised, allowing an unauthorized actor to access and download documents that may include client tax and financial data; access occurred between March 28 and April 12 and was detected on April 23. EY has notified affected clients, engaged external cybersecurity experts and law enforcement, secured systems, and is offering 24 months of identity monitoring while details about the scope and exact data types remain unclear.