Clients of Goldman Sachs and hedge fund Man Group were caught up in a cybersecurity incident that struck accounting giant Ernst & Young earlier this year. Disclosures revealed that unauthorized actors breached a third-party IT support and service management platform used by EY to handle tax-related troubleshooting tickets. While the incident exposed sensitive personal information including names, addresses, tax IDs, and financial records stored as support attachments. Goldman Sachs confirmed that its own corporate systems remained entirely untouched. EY stated that the intrusion occurred between late March and mid-April, though wider details regarding the affected clientele have only recently emerged through regulatory filings. The breach underscores ongoing supply chain vulnerabilities where third-party vendor platforms serve as unintended data repositories for major financial institutions.

Full report : Goldman Sachs and Man Group Clients Lists exposed in Ernst & Young Data Breach.