SHINYHUNTERS CLAIMS ERNST & YOUNG DATA BREACH

ShinyHunters, known for extortion-focused cyber operations, disclosed the breach and claimed access to EY infrastructure via compromised credentials from a third-party supplier. The group's involvement suggests a targeted approach rather than opportunistic hacking. Ernst & Young is one of the Big Four accounting and consulting firms, making the breach significant for its potential access to sensitive client data. The supply-chain attack vector indicates attackers exploited a weaker link in EY's network defenses rather than directly targeting the firm's primary systems. ShinyHunters typically operates as an extortion gang, threatening to leak stolen data unless demands are met. The group has claimed responsibility for breaches at multiple organizations in recent years. EY has not yet provided detailed comment on the breach scope, affected systems, or client impact. The firm's response and any ransom negotiations remain unclear.