What Is This About?

If you received a letter or email about a data breach from Ernst & Young LLP (“EY”), your sensitive personal information may have been compromised. Our firm is investigating this incident and can help you understand your rights and potential legal options.

What Happened?

On April 23, 2026, EY identified unusual activity within a third-party information technology service management platform used by the company (“the platform”). The platform, which has not yet been named publicly, is used by EY to help EY information technology personnel provide support to EY teams performing tax-related work to clients. EY immediately initiated its incident response procedure to contain the incident, determine its nature and scope, and begin remediation and recovery efforts. EY’s investigation determined that, between March 28, 2026, and April 12, 2026, an unauthorized third party accessed the platform and downloaded documents pertaining to certain EY clients.

On July 15, 2026, EY reported the breach to the Attorney General of California. On July 16, 2026, EY reported the breach to the Attorney General of Vermont. EY has begun to send notice letters to affected individuals.

What Information Was Impacted?

Based on EY’s public disclosures, the following categories of information may have been compromised:

• Name;
• Social Security number;
• Financial account codes;
• Credit and debit card information;
• Government ID Numbers (e.g. driver's license or passport);
• Health records; and
• Financial records contained in or used to prepare tax filings.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you received a notice from Ernst & Young LLP, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.