1. [News](/news) 2. EY data breach: what happened and what's at risk EY # EY data breach: what happened and what's at risk A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 17, 2026 Table of Contents * [What happened in the EY data breach?](#what-happened-in-the-ey-data-breach) * [Who is behind the incident?](#who-is-behind-the-incident) * [Impact and risks for EY customers](#impact-and-risks-for-ey-customers) * [How to protect against similar security incidents](#how-to-protect-against-similar-security-incidents) ## Key facts: EY data breach * Date occurred March 20, 2026 * Date reported July 15, 2026 * Target entity EY * Source of breach Unknown, unauthorized third-party * Data types Personal information (specific categories not disclosed) * Status Confirmed; reported on July 15, 2026. * Severity Medium; unauthorized acquisition of personal records reported to regulatory authorities. ## What happened in the EY data breach? EY (ey.com) officially reported a security incident on July 15, 2026, after filing a data breach notification with the California Attorney General. The incident involved unauthorized access to the firm’s systems that occurred between late March and April 2026. No specific threat actor has been identified as the cause of the breach, which EY is treating as an unauthorized acquisition of records. The filing confirms that EY has identified a compromise of personal information, triggering mandatory disclosure requirements under California privacy regulations. The incident is classified as medium severity because it involves the unauthorized access of sensitive records within a major professional services firm. While the specific data categories have not been detailed, EY is currently following standard incident response protocols to mitigate the exposure and notify all affected parties. Such incidents typically carry a risk of targeted social engineering or identity theft for those whose information was compromised. ## Who is behind the incident? The attacker or cause of the incident has not been identified. ## Impact and risks for EY customers For individuals associated with EY, the primary risk involves the potential exposure of personal information. This could lead to targeted phishing attacks, where malicious actors use stolen details to craft convincing messages, or credential abuse if login information was among the compromised records. While service disruptions were not reported, the misuse of personal data remains a significant concern for those whose records were acquired by the unauthorized party. Typical outcomes of such breaches include identity theft and unauthorized account access. Affected individuals should monitor their financial statements, enable multi-factor authentication on all sensitive accounts, and remain vigilant against unsolicited communications. Transparency from the organization helps users take these necessary protective steps to secure their digital identities. ## How to protect against similar security incidents Following the unauthorized access at EY involving personal records, it is crucial for potentially affected individuals to secure their digital identities and monitor for suspicious activity. * **Implement phishing-resistant multi-factor authentication.** Use hardware security keys or authenticator apps rather than SMS-based codes. Apply MFA to all professional and personal email accounts to prevent unauthorized access. * **Monitor financial and personal accounts.** Review bank statements and credit reports for any unrecognized transactions. Consider placing a fraud alert or credit freeze if sensitive personal identifiers were involved. * **Practice credential hygiene.** Update passwords for accounts that may share credentials with EY-related services. Use a dedicated password manager to generate and store unique, complex passwords for every platform. * **Enhance attack surface management.** Organizations should employ continuous monitoring to detect unauthorized access points. Regularly audit system logs and access permissions to identify anomalies early. > Proactive security measures are the best defense against the long-term risks associated with data exposure. ## Frequently asked questions ### What happened in the EY security breach? On July 15, 2026, EY (ey.com) disclosed a security breach. According to initial reports, the firm identified an unauthorized acquisition of records within its systems that occurred in late March and April 2026. ### When did the EY breach occur? The EY breach was publicly reported on July 15, 2026. The unauthorized access is known to have taken place between late March and April 2026. ### What data was exposed? While the breach involved the compromise of personal information, the specific categories of data exposed have not yet been disclosed. ### Is my personal information at risk? If you interacted with EY, there’s a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or financial records. Stay alert for updates and take precautionary measures to secure your accounts. ### What steps should companies take after being breached? EY is following standard incident response protocols to address the exposure. The firm has filed regulatory notifications, is working to fulfill its obligations to affected parties, and is likely reviewing its security measures to prevent future unauthorized access. ## Is your organization exposed to a similar risk? UpGuard continuously monitors vendors for exposed credentials and infrastructure risk, so you can catch the next breach before it becomes a headline. [Start your free trial](https://cyber-risk.upguard.com/register/trial) ## How secure is EY? EY provides professional services in assurance, consulting, tax, and transaction advisory to clients across multiple industries globally. The firm delivers audit and advisory services, strategic consulting through EY-Parthenon, technology transformation, and sustainability solutions to organizations ranging from private enterprises to public sector entities. * View our free preliminary report on EY's security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View EY's score View score](/security-report/ey) [https://ey.com/](/security-report/ey) ## Latest news Stay up-to-date with the latest news in cybersecurity. * ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 20, 2026 * ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. UpGuard Team July 16, 2026 * ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [StrataDx data breach: what happened and what's at risk](/news/stratadx-excellence-in-pathology-data-breach-2026-07-16) A data breach involving StrataDx - Excellence in Pathology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 [View all news](/news) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.