EY Discloses Breach After Third-Party Support System Intrusion
Summary
EY says an unauthorized party accessed a third-party IT support ticket system from March 28 to April 12 and downloaded documents that may have included client tax information. The number of affected clients and exact data types are unknown.
Key points
- EY says the unauthorized access involved a third-party support ticket platform used by its IT personnel.
- The company says the intruder accessed the platform between March 28 and April 12 and downloaded multiple documents.
- The documents may have contained personal and financial information used in tax filings; the specific data types and number of affected clients are unknown.
- EY says it secured its systems, removed the unauthorized access, and notified federal law enforcement.
- EY says it has no indication of misuse, further exposure, or targeting of specific individuals.
- Affected clients are offered 24 months of identity monitoring and restoration through Experian.
Article Details
- Victim Organization
- Ernst & Young
- Incident Type
- Data breach following unauthorized access to a third-party support ticket system used by IT personnel
- Data Types Exposed
- Personal data
- Financial data used to prepare tax filings
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Multiple documents were downloaded. EY says it secured its systems and removed the unauthorized access; no further operational disruption was reported.
- Ransom Or Extortion
- No data extortion or ransomware group had taken responsibility at the time of publication; no ransom demand was reported.
- Claim Status
- confirmed