<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Ernst &amp; Young data breaches · Privacy Unpacked</title>
  <link href="https://privacyunpacked.com/breaches/company/ernst-and-young/feed.xml" rel="self"/>
  <link href="https://privacyunpacked.com/breaches/company/ernst-and-young/"/>
  <id>https://privacyunpacked.com/breaches/company/ernst-and-young/feed.xml</id>
  <updated>2026-07-14T00:00:00Z</updated>
  <author><name>Privacy Unpacked</name></author>
  <entry>
    <title>Ernst &amp; Young data breach (United States): 10,895 people</title>
    <link href="https://privacyunpacked.com/breaches/company/ernst-and-young/"/>
    <id>https://privacyunpacked.com/breaches/company/ernst-and-young/#ernstyoung-2026-07-16</id>
    <updated>2026-07-14T00:00:00Z</updated>
    <summary>Ernst &amp; Young (NY, United States) notified the Vermont Attorney General, the Texas Attorney General, the Indiana Attorney General and the California Attorney General of a data breach on 14 July 2026. It affected 10,895 people. Exposed: Social Security numbers, Financial account and card details, Names and Addresses.</summary>
  </entry>
  <entry>
    <title>Ernst &amp; Young data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/ernst-and-young/"/>
    <id>https://privacyunpacked.com/breaches/company/ernst-and-young/#ernstyoung-2024-07-01</id>
    <updated>2024-07-01T00:00:00Z</updated>
    <summary>Ernst &amp; Young (NY, United States) notified the California Attorney General of a data breach on 1 July 2024. The breach began on 27 May 2023, 401 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Ernst &amp; Young data breach (United States): 168,714 Oregon residents</title>
    <link href="https://privacyunpacked.com/breaches/company/ernst-and-young/"/>
    <id>https://privacyunpacked.com/breaches/company/ernst-and-young/#ernstyoung-2023-08-22</id>
    <updated>2023-08-09T00:00:00Z</updated>
    <summary>Ernst &amp; Young (NY, United States) notified the Oregon Department of Justice, the California Attorney General, the Washington Attorney General and the Delaware Attorney General of a data breach on 9 August 2023. It told the states about 168,714 Oregon residents; the total can be higher. The breach began on 27 May 2023, 74 days before it was reported.</summary>
  </entry>
</feed>
