Beyond KPMG’s Leaks: How Legal Shields Broke Big Four Trust
Synopsis
From KPMG's 'locker papers' data-leak scandal in Australia to global exam-cheating penalties, this explainer uncovers how elite accounting giants weaponize legal privilege and performative compliance to protect corporate profits over market integrity.
For decades, global markets have been based on an underlying assumption: commercial enterprises strive for profit, the big four accounting firms KPMG, PwC, EY and Deloitte are there to uphold business integrity. They audit annual financial statements, review the balance sheets and provide required compliance training aimed at holding corporate capitalism to account.
However this has been blown apart with recent revelations that have been made worldwide. A two-tiered scheme of systemic data theft and orchestrated cover-ups from lawyers has made bare the very institutions that were supposed to monitor corporate ethics to protect revenues and tempt multi-million dollar business.
The traditional notion of corporate compliance is in shambles from parliamentary hearings that grill senior partners to record-breaking regulatory fines.
The Anatomy of the Scandal: Data Theft & The ‘Locker Papers’
The current crisis has its epicenter at KPMG Australia, where a whistleblower complaint led to an inquiry which exposed a web of executive wrongdoing. In May 2024, the former audit director made a sufficiently detailed whistleblower disclosure to KPMG's then-Managing Partner of Audit and Assurance, Julian McPherson, of the disclosure that is the basis of this report.
A detailed whistleblower disclosure containing 30 pages of information was made by the former audit director to KPMG's then-Managing Partner of Audit and Assurance, Julian McPherson, in May 2024.
Between 2023 and 2024, senior partners had access to sensitive board records of long-time audit clients such as construction giant Lendlease, the complaint said.
Instead of maintaining client information confidentiality, the partners allegedly took photos, printed and then shared those documents internally to prepare ‘hyper-competitive’ pitches for competing commercial business projects, such as major contracts with Westpac, Macquarie Group and Dexus.
The Corporate Compliance Loop
Confidential Client Data
Information allegedly used in $75M+ tenders
Internal Disclosure
Whistleblower raises concerns
Investigation
Law firm engaged to examine allegations
Legal Privilege
Privilege invoked during the process
Outcome
Whistleblower allegedly discredited and concerns buried
The matter continued to be covered up at a domestic level until it was brought to the light of day by Australian Labor Senator Deborah O'Neill's use of parliamentary privilege. In August 2026 Senate inquiry hearings, former CIO Eileen Hoggett was asked about physical copies of confidential Lendlease board documents which were located in her personal office locker.
Lawmakers read internal emails where Hoggett directed her personal assistant to ‘show a colleague the printout [sensitively] without revealing to too many people [smiley emoji].’
The entire fallout led to a number of high-profile resignations:
- May 2026: In May 2026, the Audit Chief Julian McPherson and the CEO Andrew Yates both resigned after KPMG had confessed its response to the whistleblower was ‘below the standard'.
- June 2026: Chairman Martin Sheppard resigned and agreed to shadow-banning on state contracts in Victoria, etc.
- July 2026: An independent investigation by law firm Allens confirmed the locker documents, leading new CEO John Sams to formally expel Eileen Hoggett from the partnership, voiding her pension and accrued leave.
| Stage | Traditional Independent Review | Weaponized Privilege Shield |
| Trigger | Whistleblower files a formal complaint | Whistleblower files a formal complaint |
| Investigation | Conducted by an independent third-party auditor | External corporate law firm retained by management |
| Legal Status | Open disclosure to regulatory bodies | Covered by Legal Professional Privilege |
| Outcome | Public Accountability & Reform | Findings Buried / Claims Discredited |
The Law Firm Privilege Shield: How Corporations Weaponize Reviews
The real reason behind these resignations, however, is the way corporations deal with internal wrongdoing: the weaponization of legal professional privilege.
Large companies routinely engage external corporate law firms (e.g., Ashurst and Allens for KPMG) to carry out ‘independent reviews’ when they come to terms with internal whistleblowers. As it reads, this is a form of internal responsibility; it is, on the other hand, a legal fortress that is impenetrable in actual practice:
- Information Containment: Whistleblower disclosures are directed directly through retained legal counsel so that the resulting disclosures thereunder are protected by legal professional privilege.
- Regulatory Concealment: This is when companies can legally bar internal findings from market regulators, shareholders and/or law enforcement agencies under the cloak of preparing for potential litigation.
- Plausible Deniability: These legal reviews are issued by Boards to say, in public, that ‘no evidence of systemic wrongdoing was found’ and complaints are buried until statutory bodies bring them to light.
In the case of parliamentary enquiries, it was revealed that the partner's denials were accepted without even interviewing the whistle blower. It was only after sworn answers were heard by KPMG's deputy counsel that he found that he was getting ‘misleading, if not directly deceptive’ answers from his colleagues in the legal review.
Exams-for-Sale: The Systemic Failure of Mandatory Compliance
This is a data-leak crisis that is common around the world in the Big Four. It's a data-leak crisis that's happening all over the world in the Big Four, and it's a performative ‘check-the-box’ internal corporate ethics.
In recent years, US Public Company Accounting Oversight Board (PCAOB) and other global auditors have imposed exorbitant fines on Deloitte, PwC, EY and KPMG Europe, the United States and Asia units. The reason? Cheating on required internal ethics, regulation compliance and audit quality exams throughout the entire system.
From entry-level to senior managing partner and chief quality officers, hundreds of professionals actively shared answers to tests, passed exams in groups and even changed software log files to successfully complete required courses.
| Firm | Jurisdiction | Misconduct Discovered | Regulatory Action |
| KPMG | Netherlands & Australia | Firm-wide exam answer sharing; data misuse to win audit tenders | Record $25M PCAOB fine; executive resignations; government contract bans |
| PwC | Australia & International | Government tax policy leak scandal; partner test manipulation | $3M PCAOB fine; multi-billion government consulting contract cutbacks |
| EY | United States | Systematic cheating on CPA ethics exams over multiple years | Historic $100M SEC penalty; mandatory independent oversight |
| Deloitte | Netherlands | Answer key sharing on compliance exams involving senior leadership | $3M PCAOB fine; resignation of Chief Quality Officer |
This follows some of the industry's previous scandals, including the notorious tax leaks by PwC Australia, which saw the confidential government tax policies used to help multinational clients avoid new tax regulations.
It exposes a structural problem in the system: With the ‘billable’ clock and income to come in as the standard for partner compensation, compliance training becomes an obligation to get around.
Macro Impact: Financial Fallout & The Mid-Tier Flight
The consequences of these two scandals are affecting the global professional services industry balance of power:
- Partner Pay Wars: To cover lost client revenues and fund escalating legal bills, accounting partnerships are slashing partner equity payouts by up to 20 to 30 percent. These reductions have sparked partner departures and internal lawsuits against firm management.
- The Mid-Tier Migration: Enterprise clients seeking to avoid reputational risks are fleeing the Big Four. Blue-chip clients like Lendlease have put their audit contracts out to tender, while mid-tier firms like BDO and Grant Thornton are winning major corporate tenders historically reserved for the top four.
- Mandatory Structural Breakups: Government regulators and parliamentary bodies are pushing for legislation that would force professional service networks to split their audit arms from their consulting divisions, eliminating the conflicts of interest that fuel these scandals once and for all.
A Turning Point for Global Corporate Governance
The KPMG whistleblower scandal and worldwide exam cheating fines mark the end of self-regulation for the world's biggest consulting and auditing firms. Internal ethics mechanisms turn into exercises and external legal firms become tools used to try to extinguish internal disclosures and market trust goes out the window.
Corporate boards have been informed that integrity outsourcing to top-tier consulting firms is no longer an effective cover.
With governments tightening up on rules and prohibiting firms who breach them from winning public contracts, boards are finding that they can't trust outsourcing integrity to elite consulting firms anymore.
Source: Open Sources/Multiple Media Platforms
Pooja Malik is a business journalist with over six years of experience covering startups, entrepreneurship, and emerging trends. She has previously worked with leading media platforms such as YourStory Media and BW BusinessWorld, where she reported on business, policy, and market developments. Currently, she serves as Editor at The Inspirepreneur Magazine, where she writes and edits stories across business, lifestyle, and travel, with a focus on clarity, accuracy, and reader relevance.
