Privacy
Goldman Sachs and Man Group named in EY data breach report
Goldman Sachs and Man Group have reportedly been affected by a data breach at EY, according to the Financial Times. Details remain limited and have not been confirmed by the companies involved.
Ross Grant2 min read
The short version
Goldman Sachs and Man Group have reportedly been caught up in a data breach at EY, a large consulting firm. The details are still unclear, and the companies have not confirmed the incident. If confirmed, this could mean sensitive data from these firms was exposed. For now, there is no action for clients or employees to take unless they are contacted directly.
What happened?
The Financial Times reports that Goldman Sachs and Man Group have been affected by a data breach at EY, a major professional services firm. The incident reportedly occurred earlier this year. Details about the breach, including what data was exposed and how it happened, have not been confirmed by the companies involved.
What we know so far
According to the Financial Times (opens in a new tab), Goldman Sachs and Man Group have been named as victims in a data breach involving EY, one of the world’s largest professional services firms. The report states that the incident took place earlier this year and that recent disclosures have widened the list of affected organisations. At this stage, there has been no public confirmation from EY, Goldman Sachs, or Man Group.
Who is affected
The Financial Times report suggests that both Goldman Sachs and Man Group, two major financial institutions, are among the victims. It is not yet clear what type of data was exposed, how many individuals or accounts were involved, or whether clients or employees are directly affected. Since neither EY nor the named companies have issued statements, the full scope of the breach remains uncertain.
The context: EY and third-party risk
EY (Ernst & Young) is a global firm providing audit, consulting, and advisory services to many large organisations. When a company like EY suffers a breach, it can put sensitive data from multiple clients at risk. This is known as a supply chain or third-party risk, where an attack on a service provider impacts its customers. The Financial Times notes that the list of victims has grown as more information comes to light, but does not specify how the breach occurred.
What is not yet known
There are many unanswered questions. The Financial Times is the only outlet to report this incident so far, and there are no details about the cause of the breach, the data involved, or the response from the companies. It is also unclear whether regulators or affected individuals have been notified. In similar cases, companies may face regulatory scrutiny and possible fines under laws such as the UK GDPR, which allows penalties up to £17.5 million or 4% of global turnover for serious data breaches.
What should you do?
If you are a client or employee of Goldman Sachs, Man Group, or EY, there is no immediate action to take unless you receive direct notification from the company. For organisations, this incident is a reminder to review third-party risk management and ensure that vendors follow strong security practices. Individuals should stay alert for any official communications and be cautious of phishing attempts that may follow news of a breach.
What happens next
Until EY or the affected companies confirm the details, the full impact of this breach is unknown. Organisations and individuals should monitor for updates and be prepared to respond if more information emerges.
Claimed vs confirmed
- Unconfirmed
Goldman Sachs and Man Group were affected by a data breach at EY.
Reported by the Financial Times; not confirmed by EY, Goldman Sachs, or Man Group.
The impact
- Money
- If confirmed, EY or its clients could face regulatory scrutiny and possible fines under GDPR, which allows penalties up to £17.5 million or 4% of global turnover for serious breaches.
- Reputation
- Being named in a data breach can damage trust in EY and its clients, especially in the financial sector, even before details are confirmed.
- Customers
- There is no evidence yet that customer data was exposed. Clients and employees should wait for official updates before taking any action.
Why it matters
This story involves two major financial institutions and a global consulting firm. If confirmed, the breach could affect sensitive financial or personal data. It highlights the risks companies face when sharing data with third-party service providers.
Key points
- Goldman Sachs and Man Group were reportedly affected by an EY data breach.
- Details of the breach, including what data was exposed, remain unconfirmed.
- Only one source (Financial Times) has reported the incident so far.
- Third-party breaches can affect many organisations at once.
- Clients and employees should wait for official updates before taking action.
Sources
Financial Times
Reference
