|Type||UK private company limited by guarantee|
|Founder||William Welch Deloitte|
|Revenue||US$59.3 billion (2022)|
Number of employees
Deloitte Touche Tohmatsu Limited (/dəˈlɔɪt ˈtuːʃ toʊˈmɑːtsuː/), commonly referred to as Deloitte, is an international professional services network headquartered in London, England. Deloitte is the largest professional services network by revenue and number of professionals in the world and is considered one of the Big Four accounting firms along with EY (Ernst & Young), KPMG and PricewaterhouseCoopers (PWC).
The firm was founded by William Welch Deloitte in London in 1845 and expanded into the United States in 1890. It merged with Haskins & Sells to form Deloitte Haskins & Sells in 1972 and with Touche Ross in the US to form Deloitte & Touche in 1989. In 1993, the international firm was renamed Deloitte Touche Tohmatsu, later abbreviated to Deloitte. In 2002, Arthur Andersen's practice in the UK as well as several of that firm's practices in Europe and North and South America agreed to merge with Deloitte. Subsequent acquisitions have included Monitor Group, a large strategy consulting business, in January 2013. The international firm is a UK private company, limited by guarantee, supported by a network of independent legal entities.
Deloitte provides audit, consulting, financial advisory, risk advisory, tax, and legal services with approximately 415,000 professionals globally. In FY 2021, the network earned revenues of US$50.2 billion in aggregate. As of 2020[update], Deloitte is the third-largest privately-owned company in the United States, according to Forbes. The firm has sponsored a number of activities and events including the 2012 Summer Olympics.
Controversies involving the firm, in addition to litigation surrounding a few of its audits, have included its involvement in a "potentially misleading" report on illicit tobacco trading in Australia, the fact that it suffered a major cyber-attack which breached client confidentiality as well as exposing extensive employee information in September 2017, its role as internal auditor of the insolvent contractor Carillion and its role as external auditor of Autonomy which was accused of "accounting improprieties" that contributed to an £8.8 billion write-down of value following its acquisition by Hewlett-Packard in 2011.
In 1845, William Welch Deloitte opened an office in London, United Kingdom. Deloitte was the first person to be appointed an independent auditor of a public company, namely the Great Western Railway. He went on to open an office in New York in 1880.
In 1890, Deloitte opened a branch office on Wall Street headed by Edward Adams and P.D. Griffiths as branch managers. That was Deloitte's first overseas venture. Other branches were soon opened in Chicago and Buenos Aires. In 1898 P.D. Griffiths returned from New York and became a partner in the London office.
In 1896, Charles Waldo Haskins and Elijah Watt Sells formed Haskins & Sells in New York. It was later described as "the first major auditing firm to be established in the country by American rather than British accountants".
In 1898, George Touche established an office in London and then, in 1900, joined John Ballantine Niven in establishing the firm of Touche Niven in the Johnston Building at 30 Broad Street in New York.
On 1 March 1933, Colonel Arthur Hazelton Carter, President of the New York State Society of Certified Public Accountants and managing partner of Haskins & Sells, testified before the U.S. Senate Committee on Banking and Currency. Carter helped convince Congress that independent audits should be mandatory for public companies.
In 1947, Detroit accountant George Bailey, then president of the American Institute of Certified Public Accountants, launched his own organization. The new entity enjoyed such a positive start that in less than a year, the partners merged with Touche Niven and A. R. Smart to form Touche, Niven, Bailey & Smart. Headed by Bailey, the organization grew rapidly, in part by creating a dedicated management consulting function. It also forged closer links with organizations established by the co-founder of Touche Niven, George Touche: the Canadian organization Ross and the British organization George A. Touche. In 1960, the firm was renamed Touche, Ross, Bailey & Smart, becoming Touche Ross in 1969. In 1968 Nobuzo Tohmatsu formed Tohmatsu Aoki & Co, a firm based in Japan that was to become part of the Touche Ross network in 1975. In 1972 Robert Trueblood, Chairman of Touche Ross, led the committee responsible for recommending the establishment of the Financial Accounting Standards Board.
In 1972, Deloitte's firm (by then known as Deloitte, Plender, Griffiths & Co.) merged with Haskins & Sells to form Deloitte Haskins & Sells.
In 1989, Deloitte Haskins & Sells merged with Touche Ross in the US to form Deloitte & Touche. The merged firm was led jointly by J. Michael Cook and Edward A. Kangas. Led by the UK partnership, a smaller number of Deloitte Haskins & Sells member firms rejected the merger with Touche Ross and shortly thereafter merged with Coopers & Lybrand to form Coopers & Lybrand Deloitte (later to merge with Price Waterhouse to become PwC). Some member firms of Touche Ross also rejected the merger with Deloitte Haskins & Sells and merged with other firms. In the UK, Touche Ross merged with Spicer & Oppenheim in 1990.
At the time of the US-led mergers to form Deloitte & Touche, the name of the international firm was a problem, because there was no worldwide exclusive access to the names "Deloitte" or "Touche Ross" – key member firms such as Deloitte in the UK and Touche Ross in Australia had not joined the merger. The name DRT International was therefore chosen, referring to Deloitte, Ross and Tohmatsu. In 1993, the international firm was renamed Deloitte Touche Tohmatsu.
In 1995, the partners of Deloitte & Touche decided to create Deloitte & Touche Consulting Group (now known as Deloitte Consulting).
In 2000, Deloitte acquired Eclipse to add internet design to its consulting capabilities. Eclipse was later separated into Deloitte Online and Deloitte Digital.
In 2002, Arthur Andersen's UK practice, the firm's largest practice outside the US, agreed to merge with Deloitte's UK practice. Andersen's practices in Spain, the Netherlands, Portugal, Belgium, Mexico, Brazil and Canada also agreed to merge with Deloitte. The spinoff of Deloitte France's consulting division led to the creation of Ineum Consulting.
In 2005, Deloitte acquired Beijing Pan-China CPA to become the largest accountancy firm in China. Just prior to this acquisition Deloitte China had about 3,200 employees. This acquisition was part of a five-year plan to invest $150 million in China. Deloitte has had a presence in China since 1917.
In 2007, Deloitte began hiring former employees of the Central Intelligence Agency (CIA) for their competitive intelligence unit known as Deloitte Intelligence.
In 2009, Deloitte purchased the North American public service practice of BearingPoint (formerly KPMG Consulting) for $350 million after it filed for bankruptcy protection.
Deloitte LLP took over the UK property consultants Drivers Jonas in January 2010. As of 2013, this business unit was known as Deloitte Real Estate.
In 2011, Deloitte acquired DOMANI Sustainability Consulting and ClearCarbon Consulting in order to expand its sustainability service offerings.
In January 2012, Deloitte announced the acquisition of Übermind, a mobile advertising agency. The acquisition marked Deloitte's first entrance into the mobile application field.
In November 2012, Deloitte acquired Recombinant Data Corporation, a company specializing in data warehousing and clinical intelligence software, and launched Recombinant by Deloitte. In February 2013 Recombinant by Deloitte merged with an internal informatics unit (Deloitte Health Informatics) and launched ConvergeHEALTH by Deloitte.
On 11 January 2013, Deloitte purchased substantially all of the business of Monitor Group, the strategy consulting firm founded by Harvard Business School professor Michael Porter, after Monitor filed for bankruptcy protection.
In 2014, the company introduced Rubix, a blockchain consultancy providing advisory services for clients in different business sectors, including government. In 2016 the company created its first blockchain lab in Dublin. A second hub was launched in New York in January 2017. In 2016, Deloitte Canada set-up a Bitcoin automatic teller machine and equipped a restaurant in its office complex to accept bitcoin as payment. Deloitte CIS partnered with Waves Platform to offering services related to initial coin offerings. Deloitte became a member of the Ethereum Enterprise Alliance and the Hyperledger Project sponsored by the Linux Foundation in May 2017.
In 2016, Deloitte acquired advertising agency Heat of San Francisco, best known for its work Madden NFL from EA Sports and the Hotwire travel website. Heat was the 11th digital marketing agency purchased by Deloitte Digital since its founding in 2012. As of 2016, Deloitte Digital had 7,000 employees. It billed $2.1 billion in 2015, making it one of world's largest digital agencies.
In September 2016, Apple Inc. announced a partnership with Deloitte aimed at boosting sales of its phones and other mobile devices to businesses. As part of the partnership, the two companies will launch a service called Enterprise Next, in which more than 5,000 Deloitte consultants will advise clients on how to make better use of Apple products and services.
In October 2016, Deloitte announced that they were creating Deloitte North West Europe. The Belgian, Danish, Dutch, Finnish, Icelandic, Norwegian, and Swedish member firms will combine with the UK and Swiss member firms to create Deloitte North West Europe. Deloitte, over the next three years, would invest €200m to enhance its services to its global, national and private market clients and to create development opportunities. The firm came into effect on 1 June 2017 and it is estimated to have 28,000 partners and people generating over €5bn in annual revenue. Deloitte North West Europe accounts for approximately 20% of all revenue within their Global Network.
In March 2022, Deloitte announced that, as a result of the Russo-Ukrainian War, the firm would no longer carry out business in Russia or Belarus, and would separate its practices within these countries from its global network of firms.
In March 2022, Deloitte acquired Etain, a data and digital transformation specialist company, based in Northern Ireland.
The Wall Street Journal reported in June 2022 that the firm might choose to divide itself into two new companies, one accounting firm and one advisory firm. The Wall Street Journal reported this potential change several weeks after reporting that Ernst & Young was considering a similar split.
In 1989, Deloitte, Haskins & Sells merged in most countries with Touche Ross, forming Deloitte & Touche. However, in the United Kingdom, the local firm of Deloitte, Haskins & Sells merged instead with Coopers & Lybrand (later renamed PwC).
While the full name of the UK private company is Deloitte Touche Tohmatsu Limited, in 1989, it initially branded itself as DTT International. In 2003, the rebranding campaign was commissioned by William G. Parrett, the then-CEO of DTT, and led by Jerry Leamon, the global Clients and Markets leader.
According to the company website, Deloitte now refers to the brand under which independent firms throughout the world collaborate to provide audit, consulting, financial advisory, risk management, and tax services to selected clients.
In 2008, Deloitte adopted its new "Always One Step Ahead" (AOSA) brand positioning platform to support the existing Deloitte vision: "To be the Standard of Excellence". AOSA represents the global organization's value proposition and is never used as a tagline. The recent launch of the Green Dot ad campaign also aligns with Deloitte's brand strategy and positioning framework.
In June 2016, Deloitte changed its branding and adopted a new logo, with Deloitte written in black color instead of the earlier blue.
In India, Deloitte operates under several brand names, including A.F.Ferguson &Co., A.F.Ferguson Associates, S.B.Billimoria, C.C.Choksi & Co., P.C.Hansotia, Fraser & Ross and Deloitte Haskins & Sells (India).
For many years, the organization and its network of member firms were legally organized as a Swiss Verein (the equivalent of an unincorporated association). As of 31 July 2010, members of the Verein became part of Deloitte Touche Tohmatsu Limited (DTTL), a UK private company limited by guarantee without share capital. Each member firm in its global network remains a separate and independent legal entity, subject to the laws and professional regulations of the particular country or countries in which it operates.
This structure is similar to other professional services networks which seek to limit vicarious liability for acts of other members. As separate and legal entities, DTTL and its member firms cannot obligate each other. Professional services continue to be provided by member firms only and not DTTL. With this structure, the members should not be liable for the negligence of other independent members. This structure also allows them to be members of the IFAC Forum of Firms.
In 2019, the UK partners in the firm received average pay of £882,000.
Deloitte member firms offer services in the following functions, with country-specific variations on their legal implementation (i.e., all operating within a single company or through separate legal entities operating as subsidiaries of an umbrella legal entity for the country).
Audit provides the organization's traditional accounting and audit services, as well as internal auditing, IT control assurance and Media & Advertising Assurance.
Investors in Guangdong Kelon Electrical Holdings Company Limited have claimed that there was a failure to alert them to the company's poor financial position. Deloitte claims it did a good job on the project. Deloitte's global CEO defended the firm's work on the Kelon matter. The firm was the auditor for thirty months from 2002 to 2004. It qualified its opinion in 2004 as to company sales, returns, and allowances. The firm resigned from the Kelon account after completing the 2004 audit. Deloitte said it resigned from the account because management at the client was not committed to best practices in finance.
Consulting assists clients by providing services in the offering areas of Strategy, Analytics and M&A, Customer and Marketing, Core Business Operations, Human Capital, and Enterprise Technology and Performance. Consulting is Deloitte's largest business, bringing over 40% of total revenues in 2021.
In An American Sickness (2017), Dr. Elisabeth Rosenthal attributed to Deloitte a key role in counseling the adoption of "strategic billing" as a way of increasing revenues from hospital business. She dates this development from 2005, when Deloitte hired Tommy Thompson, former secretary of health and human services, as chairman of its global healthcare practice. In 2011, Deloitte was ranked No. 1 by revenue in all areas of healthcare consulting—life sciences, payer, provider, and government health.
The firm implemented the SAP HR system for the Los Angeles Unified School District (LAUSD) for $95 million and because of faults in the system, some teachers were underpaid, overpaid, or not paid at all. As of 31 December 2007, LAUSD had incurred a total of $140 million in payments to Deloitte to get the system working properly. In 2008, there was some evidence that the payroll issues had started to stabilize with errors below 1% according to LAUSD's chief operating officer.
The firm worked on a statewide case management system for the California Judicial Council which originally had a budget of around $260 million. Almost $500 million had been spent and costs were at one time projected to potentially run as high as $2 billion. No single court became fully operational. California's Judicial Council terminated the project in 2012 citing actual deployment costs associated with the project and California's budget concerns.
Financial advisory provides corporate finance services to clients, including dispute, personal and commercial bankruptcy, forensics, e-discovery, document review, advisory, mergers & acquisitions, capital projects consulting and valuation services.
Risk advisory provides offerings in enterprise risk management, information security and privacy, data quality and integrity, strategic & reputation risk, regulatory risk, project risk and cyber risk, and business continuity management and sustainability.
Deloitte also offers authentication of valuable items. Since 2001, Major League Baseball has contracted them to authenticate signed baseball memorabilia to prevent fraud.
Tax and legal helps clients increase their net asset value, undertake the transfer pricing and international tax activities of multinational companies, minimize their tax liabilities, implement tax computer systems, and provides advisory of tax implications of various business decisions.
In November 2013, the international development charity ActionAid accused Deloitte of advising large businesses on how they could use Mauritius to avoid potentially hundreds of millions of dollars of tax in some of the poorest countries in Africa. Deloitte responded by saying that, in the absence of the double-taxation treaties, they advise their clients to avail themselves of arrangements that could result in less taxes being paid to the countries in question. Deloitte also said it was wrong to say it is tax avoidance to make use of provisions in double tax treaties and that without such treaties investment might be reduced.
GovLab is the internal think tank of Deloitte Consulting LLP's Federal Government consulting practice, focused on innovation and government reform. Created in 2010, GovLab is based at New York University in New York, New York, and typically undertakes eight or nine research topics per year, focusing on how future trends, technologies, and business models will affect government.
Deloitte operates across the world in more than 700 locations.
In the late 1990s, Deloitte commenced operations in India, at the same time as another large auditing firm KPMG. In India, ICAI regulations do not permit foreign firms to carry out audits in India. Hence Deloitte carries out audits in India under the name of C.C.Chokshi & Co., an existing auditing firm that it arranged an agreement with in 1998. In 1992, after India was forced to liberalise under one of the conditions of the world bank and IMF sponsored bail out, Deloitte was granted a license to operate in India. In 2004, A. F. Ferguson & Co., which has been in India for 110 years, joined Deloitte, following CC Chokshi & Company, Fraser & Ross, PC Hansotia & Company and SB Billimoria & Company.
In India, Deloitte has two entities: Deloitte India and Deloitte US-India (USI), which is a region within the Deloitte US organization. Deloitte India caters to clients within India, while Deloitte USI is an entity of Deloitte US that is geographically located in India and caters to clients of the US member firm.
In 2019, Fortune magazine ranked Deloitte as one of the 100 Best Companies to Work For and Bloomberg Business has consistently named Deloitte as the best place to launch a career.
Deloitte, along with KPMG, PwC and PA Consulting Group were recognized among the UK's best companies to work for in 2017.
Deloitte was named the #1 accounting firm for the tenth year in a row by Inside Public Accounting in August 2018. Deloitte's tax services have been globally recognized by ITR, with the firm notably winning three consecutive best transfer pricing awards in the Americas.
In 2017, Deloitte was ranked as one of the ten best places to work for paternity leave by Fatherly, an online resource for parenting news.
In 2018, the research firm Gartner stated that Deloitte has been consistently ranked No. 1 globally in Security Consulting Services, based on revenue, for the past 5–6 years.
In 2019, 2020 and 2021, Gartner stated that Deloitte was the No. 1 consulting service provider worldwide by revenue.
During 2021, Deloitte's Malaysia affiliate agreed to pay the Malaysia government $80 million to resolve all claims related to its auditing of accounts of scandal-linked state fund 1MDB and its unit SRC International from 2011 to 2014. Malaysian and U.S. authorities say at least $4.5 billion was stolen from 1MDB between 2009 and 2014 by high-level officials of the fund and their associates.
The Securities and Exchange Commission announced on 26 April 2005 that Deloitte had agreed to pay $50 million to settle charges relating to Adelphia's 2000 financial statements. The settlement was later reported to be as high as $210m or $167.5m.
Following Autonomy's 2011 sale to Hewlett-Packard, the British software company was accused of accounting improprieties that contributed to an $8.8 billion write-down of Autonomy's value. In May 2018, the UK-Based Financial Reporting Council (FRC) launched disciplinary action against Deloitte, Autonomy's auditor at the time of the sale. Deloitte Partners who led the audit were accused of failing to correct false and misleading information filed with the FRRP, and otherwise failing to act with objectivity during the course of the audit. The FRC's action followed legal proceedings in the US that found former Autonomy executive Sushovan Hussain guilty of fraud earlier that month.
During 2020, Deloitte was fined a record £15 million and two of its former partners involved in the audits, Richard Knights and Nigel Mercer, were also fined and sanctioned by the UK accounting watchdog, the FRC.
The Public Company Accounting Oversight Boardfined Deloitte Canada $350,000 for failing to maintain its independence during three consecutive audits of a Canadian gold-mining company, Banro Corporation.
During 2020, the UK accounting regulator, the Financial Reporting Council, fined Deloitte's UK affiliate £362,500 and reprimanded both the firm and an unnamed audit partner over failures in its audit work for Johnston Press.
In proceedings arising from the insolvency of the former entertainment company Livent, in April 2014 its special receiver obtained judgment against Deloitte for $84,750,000 in the Ontario Superior Court of Justice, in relation to Deloitte's failure to exercise its duty of care with respect to the audit of Livent's financial statements during 1993–1998. The ruling was upheld by the Ontario Court of Appeal in January 2016, but in December 2017, the Supreme Court of Canada in Deloitte & Touche v Livent Inc (Receiver of) allowed an appeal in part, declaring that liability existed only in respect of Deloitte's negligence in conducting the audit for Livent's 1997 fiscal year, and accordingly reduced the amount of damages awarded to $40,425,000.
In April 2022, Deloitte's UK affiliate was fined £2 million by the UK accounting regulator, Financial Reporting Council, over 2016 audit of British outsourcing firm, Mitie plc.
Philip Services Corp was a Canadian metals recycling company that collapsed following the revelation of accounting issues and internal fraud. A class action launched on behalf of US investors against Philip's Canadian auditor Deloitte & Touche LLP was settled in 2007 with Deloitte agreeing to pay US$50.5 million.
On 4 July 2019, the Financial Reporting Council fined Deloitte for its failure to properly audit the accounts of a Serco Group's subsidiary, Serco Geografix, in 2011 and 2012. The United Kingdom's watchdog fined Deloitte with a £4.2 million and additional £300,000 towards the costs of the investigation.
Deloitte's audit engagement partner Helen George was also fined £97,500. FRC stated that the two parties have been sanctioned for their failure to act in accordance with the fundamental principle of professional competence and due care.
In December 2022, Deloitte's UK affiliate was fined £0.9 million (approximately US$1.1 million) by the Financial Reporting Council. The fine came as a result of the company failing to obtain and supply enough audit evidence testing, rebate terms and debtor balances in connection with the 2015/16 audit of the British subsidiary of Swiss building materials firm, SIG plc.
In August 2012, Deloitte Financial Advisory Services (DFAS) publicly denied that as the official internal auditors for Standard Chartered, it helped the bank cover up money laundering operations related to Iran which were earning the bank significant profits by "intentionally omitting critical information". DFAS paid the state of New York a $10 million settlement, was required not to take on new business for one year from designated New York banks, and was required to implement reforms in order to prevent similar problems in the future. The state regulator stated that there was no evidence DFAS intentionally helped Standard Chartered launder money.
In September 2003, Deloitte reported to the Canadian Bar Association (CBA) that motor vehicle accident insurance claims for bodily injury had been declining since 1999 adjusted for inflation. This contradicted the government's and industry's argument that general damages for soft-tissue injury had to be capped at $4,000. Within hours of release, a member of Deloitte was communicating with Insurance Bureau of Canada without the knowledge of CBA (their client) and providing confidential information. The Institute of Chartered Accountants of Alberta found Deloitte guilty of unprofessional conduct and fined the firm $40,000.
During 2016, the Netherlands Authority for the Financial Markets (AFM) imposed an administrative fine of €1.81 million (~$2 million) on Deloitte's Dutch affiliate, Deloitte Accountants B.V. because it failed to comply with its duty of care in inspection audits.
During 2019, the Malaysian regulator Securities Commission Malaysia (SC) reprimanded and imposed penalties of RM2.2 million (~$0.5 million) on Deloitte's Malaysian affiliate relating to the Islamic Finance RM2.4 billion ($0.6 billion) (Sukuk Murabahah Programme.
During 2020, Deloitte's US consulting arm agreed to pay the State of Rhode Island and the US Federal Government $50 million as a settlement relating to its design of a troubled computer system for its state benefits programs.
During 2021, the US Public Company Accounting Oversight Board (PCAOB) fined Deloitte's Canadian affiliate $350,000 as a civil penalty for failure to institute reasonable assurance quality controls.
The Securities and Exchange Commission announced on 29 September 2022 that Shanghai-based Deloitte Touche Tohmatsu Certified Public Accountants LLP (Deloitte-China) had agreed to pay $20 million to settle charges relating to failures in complying with requirements for auditing US companies in China and Chinese companies in the US. Deloitte-China, also known as Deloitte Hua Yong, self-reported the deficiencies found in 12 fiscal year 2018 audits. Auditors asked clients to prepare their own paperwork to show that Deloitte-China had completed audits in at least 21 instances, creating the illusion that it followed relevant requirements when there was no evidence of it doing so. For nine clients with operations in China, Deloitte's US office also outsourced its audit work to Deloitte China.
In 2011, Deloitte was commissioned by the tobacco industry to compile a report on illicit tobacco. The Australian Customs and Border Protection Service officials called the report "potentially misleading", and raised concerns about the "reliability and accuracy" of the data. When a second Deloitte report focusing on counterfeit cigarettes was released, Home Affairs Minister Brendan O'Connor described the second report as "baseless and deceptive" and "bogus". Public health officials criticised Deloitte's decision to conduct the research, as it added credibility to the tobacco industry's effort to undermine the Australian Government's plain cigarette packaging legislation.
Deloitte was awarded a $44 million no-bid contract by the Centers for Disease Control and Prevention (CDC) in the United States to build a website to manage scheduling, inventory, and reporting for COVID-19 vaccination. However, the website functioned poorly, leading very few states to adopt it for their vaccination management.
In August 2020 a patent attorney for Tiffany Tate, the executive director of the Multi-State Partnership for Prevention (MSPP), issued a cease and desist letter accusing Deloitte and the CDC of stealing Tate's intellectual property for a mass vaccination tracker for use in tracking vaccinations for COVID-19. Tate earlier had demonstrated software to the CDC that would help automate key aspects of delivering mass vaccinations. Deloitte was present during that presentation and was identified by the CDC as a consultant. Eventually Deloitte received the technical specifications of the software. At the time that Tate demonstrated the software, the CDC indicated that it "did not have a workflow for handling vaccine distribution". Less than one week later the CDC announced its intention to build tracking software. Under the Trump administration the CDC awarded a no bid contract to Deloitte to build a vaccine administration management system, even though MSPP had offered such a system at a lower price. Later the CDC awarded a second contract to Deloitte, with both contracts totaling US$43.9 million. Tate's attorney said that Deloitte's system "has the identical structure, mirrors the functionality, and duplicates the same features" as MSPP's system. The attorney also commented that Deloitte tried to hire Ms. Tate to work on the project.
In September 2017, The Guardian reported that Deloitte suffered a cyberattack that breached the confidentiality of its clients and 244,000 staff, allowing the attackers to access "usernames, passwords, IP addresses, architectural diagrams for businesses and health information". Reportedly, Deloitte had stored the affected data in Microsoft's Azure cloud hosting service, without two-step verification. The attackers were thought to possibly have had access from as early as October 2016. Brian Krebs reported that the breach affected all of Deloitte's email and administrative user accounts. A later report by The Wall Street Journal repeated Deloitte's statement that only a few clients were affected. Deloitte said that neither its services nor its clients' businesses were disrupted. Deloitte reportedly first noticed suspicious activity in April 2017. Deloitte said that no sensitive information was compromised and that its investigators were eventually able to read every email obtained by the hackers.
In October 2017, The Guardian reported that client accounts compromised in the breach included, but were not limited to, the US Department of Defense, the US Department of Homeland Security, the US State Department, the US Department of Energy, mortgage companies Fannie Mae and Freddie Mac, the National Institutes of Health (NIH), and the US Postal Service. Fannie Mae and Freddie Mac issued statements saying they were not affected by the attack and denied that any of their data was compromised.
Deloitte said that it immediately contacted legal authorities and six clients. Deloitte also increased security measures on the advice of both internal and external experts. As of October 2017, the New York attorney general's office was investigating the hack.
Deloitte had acted as internal auditor at construction and services giant Carillion before it went into liquidation in January 2018. The "excoriating" and "damning" (The Guardian) final report of the Parliamentary inquiry into Carillion's collapse was published on 16 May 2018, and criticised Deloitte for its involvement in the company's financial reporting practices:
The select committee chairs (Frank Field and Rachel Reeves) called for a complete overhaul of Britain's corporate governance regime, accusing the big four accounting firms of operating as a "cosy club". Deloitte said it was "disappointed" with the committees' conclusions regarding its role as internal auditors, but would take on board any lessons that could be learned from Carillion's collapse.
Deloitte Consulting has been heavily involved in building unemployment insurance web portals across various US states, including Ohio, Colorado and Illinois. In May 2020, following a wave of applications resulting from the COVID-19 pandemic, it was revealed that major security weaknesses existed in the web portals of these states. Personal information of unemployed applicants, including addresses and social security numbers, were exposed and viewable by the public. Following the revelation, proposed class actions were filed against the company.
The controversy follows similar short-fallings in Florida's unemployment portal. The CONNECT site, designed by Deloitte, was described as a "colossal failure" as it was created over-budget, delivered late, and did not work. Again, individuals laid off during the COVID pandemic were particularly vulnerable as they were out of jobs and unable to receive unemployment assistance. In May 2020, an investigation was ordered by Florida Governor Ron DeSantis.
Deloitte LLP serves as the official professional services sponsor of the United States Olympic Committee since 2009. The UK member firm of Deloitte was a sponsor of the 2012 Summer Olympics and the Royal Opera House. The Canadian member firm was also the official professional services supplier for the 2010 Vancouver Winter Olympic Games and 2010 Winter Paralympic Games. In Asia, the Singapore member firm of Deloitte was a sponsor of the 2010 Summer Youth Olympics. The Australian member firm of Deloitte is a Founding Partner of Invictus Games Sydney 2018, and a Principal from the firms Consulting practice is CEO of the not-for-profit entity delivering the Games.
Moreover, Deloitte sponsors many university sports teams and societies, such as Edinburgh University Hockey Club. It also entered into a 3-year partnership with the Cambridge Union Society in November 2013.
((cite web)): CS1 maint: url-status (link)