THE cybercrime group ShinyHunters has claimed responsibility for a data breach at Ernst & Young (EY), threatening to leak sensitive tax records unless the firm engages with them by July 31. The breach involved unauthorized access to a third-party service management platform, compromising personal and financial information of clients, such as names, Social Security numbers, and bank details.
EY has acknowledged the breach, stating that it occurred between March 28 and April 12 and that it is offering affected individuals 24 months of complimentary credit monitoring services. Meanwhile, ShinyHunters has gained notoriety for targeting high-profile organizations and using data theft as leverage for ransom.