A used computer dealer based in Canada has accused EY of a data breach, legal documents filed by the company in court indicate that the company is uncertain that the breach is real, according to a report in Network World.
The dealer, Mark Morris, said that one of the servers he bought for $300 in March from Synergy Partners, where he had been a contractor, had not been wiped clean and contained Ernst & Young client business data. Morris claimed to have reported the breach to Canada’s privacy commission as well as to EY.
The consulting company requested that he either delete the information or return it but Morris allegedly refused, instead asking to be paid to delete the customer data. He also threatened, according to court documents, to sell the servers, claiming to have already received a $1.2 million offer.