Ernst & Young discloses data breach via support system hack

Sat, 18 Jul 2026 11:51:11 +0000

Engineer — Skip
SOC/IR — Learn: The breach originated through a third-party support ticketing system, illustrating a lateral entry path worth reviewing in your own vendor-managed tool integrations — no IOCs or TTPs published to act on yet.
Leader — Act: If EY is a vendor or auditor your organization uses, confirm whether your data was in scope and request EY’s incident report; brief leadership now, before this becomes a customer or auditor question.

Vendor-Compromise on CuraSec