ShinyHunters Claims EY Tax Data Breach

Ernst & Young disclosed that an unauthorized party accessed a third-party service management platform used for tax-related support work and downloaded client documents between March 28 and April 12, 2026. The records may include sensitive tax, identity, and financial information, and EY is offering affected people 24 months of monitoring and restoration services. ShinyHunters has claimed responsibility and threatened to publish data unless EY engages by July 31, but EY has not confirmed the group’s attribution or its allegations of wider access to internal environments.