Goldman Sachs and Man Group exposed in EY data breach

According to Cybersecurity News, letters sent at the end of September said an unauthorized third party accessed the platform between March 28 and April 12, 2026, and downloaded documents connected to multiple EY clients.[1] The outlet reports that the exposed information included names, addresses, tax identification numbers, email addresses, and financial details.[1]Bloomberg, citing a person familiar with the matter, reports that Goldman Sachs Group Inc.'s data was exposed earlier this year in a hack of accounting firm EY[2].GuruFocus reports that the breach was initially disclosed in July[3] and was linked to a vulnerability in Checkmarx software[3]. Cybersecurity News says EY detected unusual activity on April 23, eleven days after the last reported unauthorized access.[1]According to Cybersecurity News, Goldman Sachs said its systems were unaffected and that client assets remained safe.[1] The outlet adds that Man Group also confirmed that its systems were not compromised, describing the incident as involving third-party software used by EY.[1]Cybersecurity News reports that EY said the incident did not affect its broader enterprise systems or threaten ongoing business operations, and that its review was nearing completion.[1] The outlet says EY reported the breach to regulators in California, Texas, Massachusetts, and Vermont[1] and is offering affected individuals credit monitoring and identity protection services through a third-party provider.[1]The same outlet notes that EY's July notice said it had no evidence that the exposed data had been misused or that particular individuals were deliberately targeted.[1]