Ernst & Young Reports Data Incident to Vermont Attorney General

Ernst & Young LLP, a global professional services firm, has filed a data security incident report with the Vermont Attorney General. The filing, dated July 16, 2026, indicates that unauthorized access to some of the firm's systems occurred, leading to a potential compromise of personal information.

Due to the nature of its services, Ernst & Young routinely handles sensitive personal and financial data for its clients. The company’s notice to the Vermont Attorney General confirms an incident impacting systems that could contain such information.

According to the report, the incident involved unauthorized access. Ernst & Young has stated that it is currently investigating the full scope and impact of this security compromise. The company is taking steps to address the situation.

If you received a formal data breach notification letter from Ernst & Young, it means your personal information was potentially involved in this incident. It is important to carefully review any such communication for specific details relevant to your situation.

To help protect yourself, it is advisable to remain vigilant for any suspicious communications or activity across your accounts. Consider monitoring your statements and exercising caution with unsolicited requests for personal details, as these could be attempts to exploit compromised data. Reviewing the guidance provided in any official notification letter you receive is also a key step.