A data breach at Ernst & Young has been disclosed, resulting from the compromise of a third-party support ticket system utilized by the company's IT personnel. This breach has prompted notifications to be sent to affected customers. The incident highlights the risks associated with relying on third-party systems for critical support functions. As a major professional services firm, Ernst & Young's security posture is under scrutiny, and this breach may have significant implications for its clients and the broader industry. The company's response to the incident will be closely watched, particularly in terms of transparency and remediation efforts1. So what matters to practitioners is that this breach underscores the importance of thoroughly vetting and monitoring third-party systems to prevent similar incidents.