EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Data
An EY platform breach exposed tax and financial data linked to Goldman Sachs and Man Group clients.
Ernst & Young warned that an unauthorized party accessed a tax-services support platform between March 28 and April 12, 2026, and downloaded client documents. Exposed data included names, addresses, tax identification numbers, email addresses, and financial details tied to Goldman Sachs wealth-management clients and UK-listed hedge fund Man Group. Both firms said their own systems were not compromised. EY linked the incident to a Checkmarx vulnerability without naming a CVE, detected suspicious activity on April 23, notified regulators in California, Texas, Massachusetts, and Vermont, and is offering credit monitoring.
76