Data BreachBleeping Computer
8.0 — CRITICAL
Ernst & Young data breach claimed by ShinyHunters extortion gang
The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company's systems via a supply-chain attack. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
ShinyHunters extortion gang claimed responsibility for a supply-chain attack on Ernst & Young, compromising support tickets with client tax information.
⚙️Technical Details
Affected Systems
third-party information technology service management platformJiraGitHubAzure
Attack Vectors
supply-chain attack
💥Impact Assessment
Severity: high
Who Is at Risk
clients of Ernst & Young with personal and financial information in or used to prepare tax filings
🛡️Recommended Actions
1Monitor for suspicious activity on third-party service management platforms
2Verify the authenticity of support tickets before processing client data
3Implement additional security measures to prevent similar supply-chain attacks
📦Affected Products
third-party information technology service management platform
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.