Goldman Sachs wealth-management clients were reportedly among those whose information was exposed in an EY data breach. The reported incident involved an EY third-party support-ticket platform—not a reported intrusion into Goldman Sachs systems. According to a Financial Times-attributed summary, Goldman said its systems were unaffected and client assets remained safe.
Was Goldman Sachs hacked?
The available reporting describes unauthorized access to an EY third-party IT service-management platform containing support tickets. EY personnel reportedly used the platform for tax-related client work, and tickets could include documents with client tax information. The sources reviewed do not describe a direct intrusion into Goldman Sachs systems.
As an Amazon Associate I earn from qualifying purchases.
The Financial Times-attributed summary says Goldman Sachs wealth-management clients were among the affected groups. It does not establish that every Goldman customer was affected, or provide a complete inventory of Goldman-related records involved.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →What information was reportedly exposed?
Client letters were reported to list names, addresses, tax identifiers, email addresses, and financial information among the categories that may have appeared in downloaded documents. That does not mean every affected person had every category exposed. The reporting does not establish that Goldman account credentials were accessed, that accounts were taken over, or that funds were stolen.
#1 Best Overall
When did the EY incident happen?
| When | What the reporting says |
|---|---|
| March 28–April 12, 2026 | An unauthorized party accessed the platform and downloaded client documents, according to a reproduced EY notification and the Financial Times-attributed summary. |
| April 23, 2026 | The reproduced EY notification says the company identified anomalous activity. |
| July 2026 | Secondary reporting says EY disclosed the incident and reported it to regulators in California, Texas, Massachusetts, and Vermont. |
| End of September 2026 | Affected clients reportedly received letters describing the access period and categories of personal information. |
| October 6, 2026 | The Financial Times-attributed summary identifying Goldman Sachs wealth-management clients among affected groups was published. |
What did Goldman Sachs and EY reportedly do?
The Financial Times-attributed summary says Goldman told wealth-management clients that its own systems were not affected and client assets were not impacted. The statement was quoted as: “Goldman Sachs’ systems were not affected by this incident, and client assets at Goldman Sachs were not impacted and remain safe.” The direct Goldman statement was not available in the reviewed materials, so this is an attributed report rather than an independently reviewed notice.
A reproduced EY notification says the company’s information-security team began incident response, worked with an independent cybersecurity firm, stopped the unauthorized access, and secured the systems. Secondary reporting also says EY offered 24 months of identity monitoring and restoration through Experian. Affected clients should rely on the instructions in their own notice to confirm eligibility and how to enroll; the service details here come from secondary reporting.
What should you do if you receive an EY or Goldman notice?
- Verify the message. Contact Goldman Sachs or EY using contact details from an account statement, official website, or existing correspondence—not links or phone numbers in an unexpected email or text. Confirm whether the notice is genuine and whether your information was involved.
- Read the notice for specifics. Check which data categories it says may have been exposed, whether the notice offers identity monitoring, how to enroll, and any deadline. The reported offer is not evidence that every potentially affected person received the same notice or service.
- Protect tax and identity information. Watch for unexpected tax-related communications, account notices, or requests for personal information. If a tax identifier may have been exposed, consider contacting the relevant tax authority for guidance on available identity protections in your jurisdiction.
- Monitor financial accounts. Review statements and transaction alerts, and report any unfamiliar activity directly to the financial institution. The reporting does not say Goldman accounts were accessed, but monitoring is a sensible response when a notice says financial information may have been included.
- Use identity-monitoring support if offered and appropriate. Follow the enrollment instructions in a verified notice. The reported 24-month Experian monitoring and restoration offer is a service described by secondary reporting, not a requirement to buy a separate product.
What remains unknown?
The reviewed reporting does not give a confirmed count of affected people or downloaded documents, identify every Goldman-related record involved, or show that all Goldman customers were in scope. It also does not provide technical evidence identifying the precise software component involved in the reported vulnerability. A Financial Times-attributed summary connects the incident to a Checkmarx software vulnerability and says the Shiny Hunters group claimed responsibility; neither the technical details nor the attribution are independently established in the materials reviewed.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
