Act
archived
ShinyHunters Claims Ernst & Young Breach via Supply-Chain Attack
- Engineer — Learn: Supply-chain credential theft at a major professional services firm is a relevant attack pattern, but no specific compromised component, IOCs, or affected systems have been identified yet — nothing to patch or audit without further detail.
- SOC/IR — Learn: ShinyHunters remains an active extortion actor using supply-chain pivots; no IOCs or TTPs are published in this disclosure, so no hunt can be launched today — watch for follow-on reporting with technical indicators.
- Leader — Act: E&Y provides audit, tax, and advisory services to a large share of enterprises, meaning your firm’s confidential data may be in scope; contact your E&Y relationship manager this week to confirm exposure and request a formal incident attestation before customers or auditors ask first.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.