Finance Giant Apollo Falls Victim to Hacking Attack

Apollo Global Management, one of the world’s leading private investment firms, has officially confirmed that users’ personal data was stolen from its cloud systems. The cybersecurity incident is notable because it occurred amid another large-scale hacking campaign targeting major companies in the finance and investment sectors. Techcrunch.com reports it.

According to TechCrunch, the company disclosed the cyber incident in an official letter submitted to the California attorney general. Apollo Chief Human Resources Officer Matthew Breitfelder said the attackers used social engineering to gain unauthorized access to the company’s cloud environment between July 6 and 10 this year.

Stolen Data and Scope of the Risk

The data obtained by cybercriminals included citizens’ names, dates of birth, home addresses and other contact details, as well as Social Security numbers. However, the official letter did not specify whose personal data was exposed—employees’ or representatives of organizations affiliated with the company.

Apollo Global Management is currently considered one of the world’s largest investment funds, with $938 billion in assets under management. According to the company’s public reports, its workforce numbered nearly five people as of February 2026. Despite requests from the press, company representatives declined to provide further comment.

Who Is Behind the Cyberattacks?

The confirmed cyberattack occurred just weeks after Google security researchers warned of a major extortion campaign targeting the finance sector. Reuters had previously reported that Apollo, along with major financial firms such as Blackstone, Bridgewater and Bain Capital, had also been targeted by hackers.

According to Google analysts, groups known as Falcon, Helix, Pink and Redact often use social engineering techniques. Attackers pose as IT support staff, call employees and persuade them to enter passwords and multi-factor authentication codes through fake login portals.

After obtaining the data, hackers demand money from companies or threaten to publish the information. In some similar attacks, criminals reportedly obtained extortion payments of up to $750,000.