EY Third-Party Platform Breach Exposes Tax Data

Ernst & Young disclosed that an unidentified third party accessed and downloaded documents from a third-party IT support platform used in tax-related work between March 28 and April 12, 2026.

The documents may have contained sensitive personal and financial information, including tax records, Social Security numbers, and account data, although the full scope remains unclear. EY secured the affected systems, notified authorities and clients, and offered two years of identity and credit monitoring, while no confirmed misuse has been reported.