DATA BREACH ALERT: Were You Affected by the Ernst & Young Data Breach?
Edelson Lechtzin LLP is investigating class action claims on behalf of Ernst & Young clients whose personal and financial tax information may have been exposed. If you received a breach notice, you may be entitled to compensation.
Request Your Free Case Evaluation →
No cost. No obligation. Speak confidentially with a data privacy attorney.
What Happened
Ernst & Young (EY) — one of the world’s largest accounting and professional services firms — has disclosed a data breach that exposed personal and financial information contained in, or used to prepare, client tax filings.
On April 23, 2026, EY detected suspicious activity on its networks and launched an investigation with outside cybersecurity experts. That investigation found that between March 28 and April 12, 2026, an unauthorized third party accessed a third-party support platform used by EY’s IT personnel and downloaded documents belonging to a number of EY clients. EY began notifying affected clients in July 2026.
EY has said it secured its systems, removed the unauthorized access, and notified federal law enforcement. As of its disclosure, EY has not publicly stated how many clients were affected or which third-party vendor was involved.
What Information May Have Been Exposed
The documents in the affected system may have included sensitive personal and financial information tied to client tax filings, such as data contained in support tickets and their attachments.
Because tax records combine identifying and financial details, affected clients may face a heightened risk of:
- Identity theft
- Tax fraud and fraudulent refund claims
- Targeted phishing and social engineering scams
Do I Qualify?
You may be eligible to join the investigation if:
- You are a current or former Ernst & Young client, or
- Your personal or financial information appeared in documents EY used to prepare your tax filings, and
- You received a data breach notification from Ernst & Young.
Not sure whether you were affected? We can help you find out. Contact us for a free review.
Your Legal Options
Edelson Lechtzin LLP is investigating a potential class action to pursue legal remedies for individuals whose sensitive personal and financial information may have been compromised in the Ernst & Young breach.
Companies that collect sensitive data have a duty to protect it. When they fail, affected individuals may be entitled to compensation and other relief. Our firm evaluates your rights and potential claims at no cost to you, and you pay nothing unless we recover on your behalf.
Contact Us for a Free Case Evaluation
Speak confidentially with a data privacy attorney today.
Marc Edelson, Esq. Edelson Lechtzin LLP 411 S. State Street, Suite N-300 Newtown, PA 18940
- Phone: 844-696-7492 ext. 2
- Email: [email protected]
- Web: www.edelson-law.com
Steps You Can Take Now to Protect Yourself
- Review your accounts. Monitor bank statements, credit reports, and tax records regularly for suspicious activity.
- Enroll in the offered protection. If EY offered you complimentary identity monitoring and restoration through Experian, consider enrolling before the October 31, 2026 deadline stated in your notice.
- Keep your records. Confirm whether your information was involved and preserve any letters or emails you received about the breach.
- Add fraud safeguards. Consider placing fraud alerts and credit monitoring, and consider requesting an IRS Identity Protection PIN to guard against tax-related fraud.
Frequently Asked Questions
Does it cost anything to speak with the firm? No. Case evaluations are free and confidential, with no obligation.
How do I know if I was affected? If you received a breach notification from Ernst & Young, or your personal or financial information was used in an EY-prepared tax filing, you may be affected. Contact us and we can help you determine whether you qualify.
What could a claim seek to recover? Claims of this kind typically seek compensation for losses and out-of-pocket costs, as well as measures to protect against future harm. The firm will explain what may apply to your situation during your free evaluation.
Is there a deadline to act? Legal claims are subject to filing deadlines, and the identity-protection enrollment offered by EY has its own deadline of October 31, 2026. It is best to reach out promptly.