Ernst & Young LLP data breach
Ernst & Young LLP appears in 12 breach notices filed with Texas AG, Vermont AG, California AG, New Hampshire DOJ, Indiana AG, SC Consumer Affairs, Oregon DOJ, Washington AG, Maryland AG and Delaware DOJ, most recently reported on July 17, 2026.
Also listed as: Ernst & Young, LLP (Supplemental); Ernst & Young, LLP
Breach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| Jul 17, 2026 | Texas AG | Mar 28, 2026 – Apr 23, 2026 | 873 Texas residents | Name of individualAddressSocial Security Number InformationFinancial Information (e.g. account number, credit or debit card number)Other | Texas AG list ↗ |
| Jul 16, 2026 | Vermont AG | Not listed | 13 Vermont residents | Social Security NumbersFinancial Account CodesCredit and Debit Account Info | Vermont AG list ↗ |
| Jul 15, 2026 | California AG | Mar 28, 2026, Apr 23, 2026 | Not listed | Not listed | California AG list ↗ |
| Jul 15, 2026 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Jul 14, 2026 | Indiana AG | Mar 28, 2026 | 28 Indiana residents | Not listed | Indiana AG list ↗ |
| Jul 1, 2024 | California AG | May 27, 2023, May 31, 2023 | Not listed | Not listed | California AG list ↗ |
| Aug 28, 2023 | SC Consumer Affairs | Not listed | 3,037 South Carolina residents | Not listed | Notice ↗ |
| Aug 22, 2023 | Oregon DOJ | May 27, 2023 – May 31, 2023 | 168,714 Oregon residents | Not listed | Oregon DOJ list ↗ |
| Aug 9, 2023 | California AG | May 27, 2023, May 31, 2023 | Not listed | Not listed | California AG list ↗ |
| Aug 9, 2023 | Washington AG | May 27, 2023 – May 31, 2023 | 1,129 Washington residents | NameSocial Security NumberFinancial & Banking Information | Washington AG list ↗ |
| Aug 9, 2023 | Maryland AG | Not listed | 16,505 Maryland residents | NameSocial Security numberFinancial account informationPayment card informationAddress | Notice ↗ |
| Not listed | Delaware DOJ | May 27, 2023 – May 31, 2023 | 2,507 Delaware residents | Not listed | Delaware DOJ list ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
Is there a settlement?
We don't track an open class-action settlement for Ernst & Young LLP right now. Settlements usually come months or years after a breach. Get an email when new settlements are announced.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.