Personal fairness big Apollo World Administration has confirmed an information breach by which hackers stole reams of private info from the corporate’s cloud techniques.
The breach comes a month after safety researchers sounded the alarm on a brand new hacking marketing campaign concentrating on monetary and personal fairness giants.
The monetary big confirmed the incident in a letter filed with California’s attorney general. Apollo’s human assets chief Matthew Breitfelder stated that hackers used a social engineering assault to achieve entry to the corporate’s cloud atmosphere between July 6 and July 10. The hackers took names, beginning dates, contact info (together with house addresses), and Social Safety numbers.
The letter doesn’t particularly say who had their private info stolen, resembling Apollo staff or people at corporations it owns. Apollo is without doubt one of the world’s largest non-public fairness companies with $938 billion in belongings beneath its administration.
When reached by TechCrunch, Apollo spokesperson Giovanna Falbo didn’t instantly present remark or reply questions in regards to the incident, together with whether or not the corporate paid the hackers a ransom.
Apollo has round 5,000 staff as of February 2026, in keeping with the company’s public regulatory filings.
The now-confirmed hack comes weeks after security researchers at Google warned that hackers had been concentrating on non-public fairness corporations and monetary giants as a part of a widespread extortion marketing campaign. Reuters reported that Apollo was one of many corporations that hackers focused, alongside Blackstone, Bridgewater, Bain Capital, and others, however that it was unclear if any of the businesses had been efficiently breached.
Google says the hackers, who go by varied names — Falcon, Helix, Pink, and Redact — rely largely on social engineering assaults that contain calling staff and pretending to be IT helpdesks or assist. The objective is to trick the staff into getting into their passwords and multi-factor authentication codes in spoofed login portals, which permit the hackers to achieve entry to company networks.
After stealing knowledge, the hackers then extort the businesses into paying a ransom or threaten to publish the information on their leak website.
A number of the assaults netted the hackers ransoms as a lot as $750,000, in keeping with Google.
Till 2025, TechCrunch was a subsidiary of Yahoo, an promoting tech firm owned by Apollo.
While you buy by means of hyperlinks in our articles, we could earn a small fee. This doesn’t have an effect on our editorial independence.