Ernst & Young (EY)

01. Company

Ernst & Young Global Limited (EY) is a leading global professional services firm headquartered in London, United Kingdom, founded in 1989 through the merger of Ernst & Whinney and Arthur Young & Co. With over 10,000 employees and annual revenue of approximately $53.2 billion, EY provides a comprehensive suite of services including assurance, tax advisory, transaction consulting, and digital transformation. The firm operates worldwide and maintains a significant presence across North America, Europe, and Asia. EY emphasizes continuous skills development through initiatives like the EY Tech MBA and EY Badges program, preparing its workforce for future-focused technology and sustainability challenges. As a member of the Big Four accounting firms, EY serves a diverse client base spanning public and private sectors.

02. Product

EY delivers a range of proprietary technology platforms and consulting solutions designed to accelerate digital transformation and strategic decision-making. Key offerings include EY-Parthenon Competitive Edge, an AI-led M&A and strategic intelligence platform that scans markets for disruption opportunities and competitor analysis. The firm also provides EY Risk Navigator for predictive analytics in risk and compliance monitoring, and the EY Trusted AI Platform to evaluate and quantify AI impact and trustworthiness. Additionally, EY's ey.ai orchestrates innovation through strategic alliances with major technology vendors like Microsoft, IBM, Adobe, and Snowflake. EY also supports low-code/no-code development to enable rapid, customizable application updates and API integrations for clients.

03.Security & Risk

EY states that its global technology products, services, and data centers undergo independent third-party compliance audits against ISO 27001 standards to ensure information security management. The firm maintains a global cyber response framework and offers privacy litigation compliance and business continuity planning services. However, EY's security posture was recently challenged by a significant incident involving a third-party IT service management platform. The firm relies on data protection technologies aligned with applicable privacy laws and regulatory requirements. Despite these controls, the compromise of an external vendor platform highlights ongoing third-party risk management challenges, prompting EY to enhance incident response procedures and notify affected stakeholders regarding exposed client records.

04. Events

• [breach] EY Third-Party IT Support Platform Data Breach

  Unauthorized access to a third-party IT service management platform between March 28 and April 12, 2026, exposed client tax, financial, and personal information. EY detected activity on April 23, 2026, and filed breach notifications in July 2026.

  Jul 15, 2026, 12:00 AM · Source

05. Competitors

Vendors offering a similar product or service - for side-by-side comparison, not a ranking.

• Accenture

  accenture.com

  Vet this vendor →

• Deloitte

  deloitte.com

  Vet this vendor →

• PwC

  pwc.com

  Vet this vendor →

• KPMG

  kpmg.com

  Vet this vendor →

06. Recent News

In July 2026, EY publicly disclosed a major data breach following the unauthorized access of a third-party IT support ticket system used by its tax practice personnel. The intrusion occurred between March 28 and April 12, 2026, during which attackers downloaded documents containing client tax information, Social Security numbers, and financial account codes. EY detected anomalous activity on April 23, 2026, and immediately initiated its incident response protocol. The firm filed breach notifications with multiple state Attorneys General, including California and Vermont. This incident marks EY's third significant security breach in under three years linked to third-party vendors, resulting in a proposed class-action lawsuit and heightened scrutiny over the firm's vendor risk management practices.

07. Citations

1. [1] The firm also provides EY Risk Navigator for predictive analytics in risk and compliance monitoring https://www.ey.com/en_us/services/technology/platforms-products
2. [2] This incident marks EY's third significant security breach in under three years linked to third-party vendors, resulting in a proposed class-action lawsuit https://www.techtimes.com/articles/320969/20260719/ey-tax-data-stolen-through-third-party-help-desk-platform-four-states-notified.htm
3. [3] Key offerings include EY-Parthenon Competitive Edge, an AI-led M&A and strategic intelligence platform https://www.ey.com/en_us/services/strategy/competitive-edge
4. [4] Ernst & Young Global Limited (EY) is a leading global professional services firm headquartered in London, United Kingdom, founded in 1989 through the merger of Ernst & Whinney and Arthur Young & Co. https://en.wikipedia.org/wiki/Ernst_%26_Young
5. [5] In July 2026, EY publicly disclosed a major data breach following the unauthorized access of a third-party IT support ticket system https://www.upguard.com/news/ey-data-breach-2026-07-19
6. [6] The intrusion occurred between March 28 and April 12, 2026, during which attackers downloaded documents containing client tax information, Social Security numbers, and financial account codes. https://www.classaction.org/data-breach-lawsuits/ernst-and-young-july-2026

11. Vendor response

Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.