Ernst & Young Discloses Data Breach Affecting Client Tax Information
Incident Overview
Ernst & Young (EY), one of the world's largest accounting and professional services firms, has disclosed a data breach affecting client tax information. According to reports, attackers gained access to a third-party support ticket system that contained sensitive customer tax data.
Duration and Scope
The breach went undetected for approximately two weeks, during which time unauthorized parties had access to the compromised system. The exposed data specifically relates to customer tax information, which could include sensitive financial details depending on the nature of the support tickets involved.
Third-Party Risk
This incident highlights ongoing concerns about third-party vendor security. The breach did not originate from EY's internal systems but rather from an external support ticket platform, emphasizing the broader supply chain security challenges that organizations face when relying on external service providers.
Implications
While full details about the number of affected clients have not been disclosed, such breaches are particularly concerning given the sensitivity of tax-related information. Tax data can potentially be exploited for identity fraud, phishing attacks, or other malicious purposes.