Ernst & Young LLP Reports Data Incident to Vermont AG

Ernst & Young LLP, a major multinational professional services firm, formally reported a data security incident to the Vermont Attorney General on July 16, 2026. This notification confirms that unauthorized access to certain company systems took place.

While the specific types of information involved and the number of individuals affected have not been detailed in the public filing, individuals who received a direct notification letter should understand that their personal information was potentially impacted by this incident. The report uses general terms to describe the scope of data exposure.

Given its operations, Ernst & Young LLP routinely handles sensitive personal and business information necessary for its audit, tax, consulting, and advisory services. The firm is required to maintain the confidentiality and security of such data for regulatory compliance and client engagements.

The filing indicates that Ernst & Young LLP is actively investigating the nature and extent of this unauthorized access. This process aims to understand how the intrusion occurred and what information was accessed or potentially exfiltrated. Further details regarding the incident may emerge as their investigation progresses and additional information is made public through regulatory channels.

Those who received a notification are advised to remain vigilant following this incident. It is prudent to monitor your accounts and be cautious of any unsolicited communications, as this may be an attempt to leverage the exposed information. Consider taking advantage of any protective services, such as credit monitoring, if offered by the firm.