Did Ernst & Young LLP have a data breach?

In plain terms

Ernst & Young LLP has reported a data security incident to Vermont authorities, indicating a breach that may have compromised personal information. Individuals who have interacted with the company should remain vigilant for unusual activity. The company states it is currently investigating the matter.

Ernst & Young LLP, a global professional services network, has filed a data breach notification with the Attorney General of Vermont. This filing, submitted on July 16, 2026, confirms that the company experienced a security incident involving personal information.

The official filing does not specify the particular type of data that was exposed, the nature of the breach, or the number of individuals potentially affected. While these specific details are not public at this time, the notification serves as an alert that personal information may have been compromised.

Ernst & Young LLP has indicated that it is actively investigating the incident. This means that the full scope and impact of the breach may still be under review, and additional information could become available as their investigation progresses.

Individuals who are current or past clients or employees of Ernst & Young LLP should take proactive steps to safeguard their personal information. This includes regularly reviewing financial statements, credit reports, and account activity for any unauthorized transactions or suspicious inquiries.

It is also advisable to be cautious of unsolicited communications, whether by email, phone, or mail, that request personal details. Verify the legitimacy of any such requests directly with the company using official contact information, not through links or numbers provided in the suspicious communication.

As this information is based on public records filed with Vermont regulators, it serves as a verified confirmation of the breach. Remaining alert and monitoring your accounts are general, widely recommended precautions following any data security event where your information may be at risk.