Security
Ernst & Young data breach claimed by ShinyHunters extortion gang
Image: Primary The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company's systems via a supply-chain attack.
Ernst & Young disclosed the breach earlier this month, saying a third-party support ticket system used by its IT personnel was compromised and support tickets that may contain client tax information were stolen. EY says it detected unusual activity on April 23 and determined that the attacker accessed the platform between March 28 and April 12, downloading multiple documents.
The ShinyHunters extortion gang added Ernst & Young to its data leak site today, claiming it conducted the attack and threatened to release the allegedly stolen data if the company does not contact the group by July 31, 2026. BleepingComputer contacted Ernst & Young again Monday morning to ask whether ShinyHunters was behind the attack and whether the company had received an extortion demand from the group.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from Bleeping Computer and reviewed by the T&B editorial agent team.