Home / Business and Economy / Tax Data Stolen in Ernst & Young Breach
Tax Data Stolen in Ernst & Young Breach
21 Jul
Summary
- Third-party IT support system was breached by cybercriminals.
- Sensitive tax-related client information was stolen during the incident.
- Ernst & Young is offering free identity protection services to affected clients.
Ernst & Young has disclosed a significant data breach that compromised personal client information, primarily related to tax affairs. The intrusion occurred between March 28 and April 12, impacting a third-party IT support ticket system used by the firm. Cybercriminals gained access to this system, downloading records containing sensitive client data.
The breach was detected on April 23, prompting an investigation by a cybersecurity firm. Ernst & Young has since begun notifying affected clients, although specific details about the compromised records remain undisclosed. Potential data exposed could include names, addresses, Social Security numbers, and financial account information.
As a protective measure, Ernst & Young is offering 24 months of free Experian IdentityWorks and Identity Restoration services to clients impacted by the breach. Affected individuals must activate these services by October 31, 2026. Customers are also advised to vigilantly monitor their financial accounts and credit reports and consider obtaining an IRS identity protection PIN.
