Last mentioned: 1d ago
Next Court Date
Scheduled adjournment at Downing Centre Local Court for the Issa brothers’ case.
Firings reported and criminal charges filed
The Australian Financial Review first reports the firings; the AFP charges the two men with accessing restricted banking data. They appear in Sydney court the same day.
PM Albanese Publicly Comments
Prime Minister Anthony Albanese tells ABC News Breakfast the breach is ‘a serious issue’ and criticises the conduct of major consulting firms, specifically referencing EY.
Court Appearance at Newtown Local Court
The two charged individuals appeared in court following bail, marking the opening phase of criminal proceedings.
Initial Court Mention
Phillip and Paul Issa briefly appear at Downing Centre Local Court; both are charged with unauthorised access/modification of restricted data. Bail is granted and the matter adjourned to August 25.
EY hires two junior staffers
Two graduates join EY and are placed on secondment at Commonwealth Bank of Australia.
Unauthorized account access occurs
The staffers allegedly access the bank account of Prime Minister Albanese and at least one EY partner while embedded at CBA.
AUSTRAC Insider Risk Guidance Released
AUSTRAC published recommendations for managing insider risk, including robust upfront screening and periodic re-screening for high-risk roles.
Two individuals have been charged over the alleged access of a federal parliamentarian’s restricted banking data at Commonwealth Bank. One is a former EY contractor, underscoring the persistent insider threat and third-party risk in financial institutions.
With two EY graduate consultants charged for unauthorised access, the incident serves as a real-world case study of insider threat detection and access control failures. The cybersecurity community can draw lessons on monitoring, privilege management, and the importance of layered defences even against vetted insiders.
A serious insider threat event at Commonwealth Bank saw two EY secondees, aged 21 and 25, misuse system access to view Prime Minister Albanese’s personal banking data. The breach underscores the peril of embedding third-party personnel into critical financial infrastructure and highlights the human factor in cybersecurity.
This page surfaces every story mentioning EY across our cybersecurity coverage. We track each entity's appearance over time so readers can trace how the narrative evolves — which developments are isolated incidents, which build into longer arcs, and which reframe how operators in the space think about the entity. Story selection uses the same multi-source verification gate applied across the rest of our coverage.
Read our editorial methodology for how we identify, deduplicate, and score entity references. Our glossary defines the technical terms used across stories on this page, and our trends index contextualizes individual developments against the longer-running cybersecurity beat. Cross-entity comparisons live on our compare view.
| What you see | What it tells you |
|---|---|
| Story count | Number of distinct stories where EY was a primary or referenced actor. |
| Recency clustering | Whether mentions are concentrated in a recent window (a news cycle) or distributed (a sustained arc). |
| Sentiment distribution | Aggregate sentiment of the stories mentioning this entity, weighted by impact score. |
| Cross-niche links | When the same entity surfaces in our sibling networks, we link to those views to enrich context. |