Skip to content
ZDNET·

🚨EY Data Breach Exposes Client Tax Info

Sensitive tax data stolen in EY breach

TL;DR

A third-party IT support system used by Ernst & Young was breached, exposing client tax information. The breach occurred from March 28 to April 12, 2026.

Ernst & Young experienced a data breach through its third-party IT support system, compromising sensitive tax-related information for clients. This incident highlights the importance of securing external systems and underscores the risks associated with outsourcing critical services. The breach exposed names, addresses, Social Security numbers, financial account info, and other records used in preparing tax filings. Ernst & Young is offering 24 months of free Experian identity protection services to affected customers.

EY Data Breach Exposes Client Tax Info — ZDNET

Key Points

1

The breach occurred from March 28 to April 12, 2026, with attackers having access for roughly two weeks.

2

EY detected suspicious activity on the platform on April 23 and hired a cybersecurity firm to investigate.

3

No further details have been disclosed about malware or specific data compromised in the breach.

4

Ernst & Young is offering 24 months of free Experian services: IdentityWorks and Identity Restoration for affected customers.

5

Customers must visit Experian's website using their unique code before October 31, 2026, to activate these services.

Why It Matters

If you're a client of Ernst & Young or use third-party IT support systems, this breach is critical. Names, addresses, and financial data were at risk. Monitor your accounts closely for any unusual activity.

EYErnst & YoungData BreachTax InformationCybersecurity

Frequently Asked Questions

Why does this matter?

If you're a client of Ernst & Young or use third-party IT support systems, this breach is critical. Names, addresses, and financial data were at risk. Monitor your accounts closely for any unusual activity.

What happened?

A third-party IT support system used by Ernst & Young was breached, exposing client tax information. The breach occurred from March 28 to April 12, 2026.

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.

Join 2,179 builders reading daily.