EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
EY says a tax-platform breach exposed Goldman Sachs and Man Group clients' personal and financial data.
Ernst & Young warned that an unauthorized party accessed a tax-services support platform between March 28 and April 12, 2026, and downloaded client documents. Exposed data included names, addresses, tax identifiers, email addresses, and financial details linked to Goldman Sachs wealth-management clients, Man Group, and Tishman Speyer investors. EY detected unusual activity on April 23, notified California regulators on July 15, and said its broader systems and the financial firms' own networks were not compromised. Reporting attributed the incident to a Checkmarx flaw without naming a CVE, and ShinyHunters claimed responsibility, which has not been independently confirmed.