There is an update to the data security incident involving Ernst & Young, which ShinyHunters claimed responsibility for. Ernst & Young did not confirm that ShinyHunters was responsible for the breach, but in its latest update, ShinyHunters adds additional details to its claims and leaks the data.
Ernst & Young disclosed the breach in July, saying that the attack occurred between March 28 and April 12 after an unnamed third-party support ticket system was compromised and that support tickets containing client tax information were stolen.
In an update today, ShinyHunters claimed:
Over 871GB of data was compromised from Jira, Github, and Azure. Jira is the “compromise at third party platform” that EY did not disclose.
The Company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don’t care.
The data has now been leaked on the dark web. Because their download appears quite slow, it may take a while before any site is able to acquire and analyze all of the data.
