EY Reports Customer Data Breach After Support System Hack

Global auditing and consulting firm Ernst & Young (EY) has reported a cybersecurity incident that led to a customer data breach. Attackers gained access to the company’s IT support platform between March 28 and April 12, 2026.

In a notification to affected clients, EY stated that tax-related documents may have been transmitted through the support ticketing system. While the exact list of compromised data remains undisclosed, it is known to include personal and financial details used for tax reporting.

The company detected suspicious activity in its networks on April 23 and promptly launched an investigation with external cybersecurity experts. Analysis confirmed that attackers uploaded several documents, but no evidence suggests further distribution or misuse for fraudulent purposes.

EY assured that unauthorized access to the system has been blocked and law enforcement has been notified. To mitigate risks, affected clients are offered two years of free credit monitoring via Experian. The registration deadline for the program is October 31, 2026.

As of the time of publication, no known cybercriminal groups have claimed responsibility for the attack on EY. The company continues to investigate the incident.