Tishman Speyer, a global real estate development and investment firm, experienced a data security incident involving its tax services provider, Ernst & Young LLP (EY). An unauthorized party accessed an EY IT platform between March 28, 2026, and April 12, 2026. Tishman Speyer was notified by EY on August 6, 2026, and followed up with identification by August 25, 2026. Consumers were notified around September 19, 2026.
The breach exposed personal information related to investment holdings for Tishman Speyer investors. The specific categories of impacted data vary by individual, but bank account numbers, income, and net worth were explicitly excluded. The exact number of affected individuals has not been publicly disclosed, with EY noting the dataset was time-intensive to reconcile.
Details can continue to emerge regarding the full scope of the incident, and additional information may be released as any ongoing investigations progress. Free credit monitoring was offered to affected individuals.