Home / Technology / EY Data Breach Hits Goldman Sachs, Man Group Clients
EY Data Breach Hits Goldman Sachs, Man Group Clients
7 Oct
Summary
- EY experienced a data breach affecting clients of major financial firms.
- Personal and financial data, including tax identifiers, were compromised.
- The breach originated from a vulnerability in Checkmarx software.
Clients of Goldman Sachs' wealth management division and UK-listed hedge fund Man Group are among those affected by a major data breach at Big Four accounting firm EY. This incident, first disclosed in July, originated from a vulnerability in Checkmarx software during March and April. EY has since warned clients, including Goldman Sachs, Man Group, and Tishman Speyer, that their personal and financial data was compromised.
The letters sent in September detailed that an unauthorized third party accessed and downloaded documents containing names, addresses, tax identifiers, email addresses, and financial information. The cybercriminal group ShinyHunters claimed responsibility for the hack. While law enforcement linked ShinyHunters to large-scale breaches and extortion, an alleged leader was arrested last month.
Goldman Sachs has confirmed its systems were not affected and client assets remain safe, stating they are independently reviewing EY's remediation efforts. Man Group also affirmed that its internal systems were not compromised. EY stated the incident did not impact broader enterprise systems and presents no ongoing business threat, with the investigation in its final stages. Affected clients are being offered credit monitoring and identity protection.
