ShinyHunters Claims Ernst & Young Hack
ShinyHunters claims responsibility for Ernst & Young data breach affecting tax clients.
The ShinyHunters extortion group has claimed responsibility for a recent Ernst & Young data breach in which attackers stole personal and financial information from a third-party service management platform between March 28 and April 12. Compromised data includes client names, addresses, Social Security numbers, account numbers, and credit/debit card information used for tax filings. ShinyHunters has posted EY on its Tor-based leak site and threatened to release all stolen data unless the company makes contact by July 31.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Ernst & Young?
Get an email when a new story names Ernst & Young, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Ernst & Young breach highlights the critical risk posed by third-party service management platforms that handle sensitive client data. Attackers had undetected access for over two weeks (March 28–April 12), suggesting inadequate monitoring of vendor-managed environments. The compromised data — including Social Security numbers, account numbers, and payment card information — represents some of the most sensitive personal and financial data categories, amplifying regulatory and reputational consequences. This incident underscores that an organization's security posture is only as strong as the weakest link in its vendor ecosystem.
What helps against this
How we list vendors- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.