Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants

Private equity firm Apollo Global Management has confirmed a data breach in which hackers accessed sensitive personal information stored in the company's cloud systems. The breach occurred between July 6 and July 10, according to Matthew Breitfelder, Apollo’s human resources chief. Hackers reportedly obtained names, birth dates, contact details, including home addresses, and Social Security numbers. The incident was disclosed in a letter filed with California’s attorney general. The breach follows a broader trend of cyberattacks targeting financial institutions and private equity firms, as highlighted by recent warnings from security researchers. Security analysts at Google identified a coordinated hacking campaign involving groups known by names such as Falcon, Helix, Pink, and Redact. These actors primarily employ social engineering tactics, often posing as IT support personnel to deceive employees into divulging login credentials and multi-factor authentication codes. Once inside corporate networks, the hackers steal vast amounts of data and demand ransoms or threaten to release the information publicly. Some of these attacks have reportedly yielded ransoms exceeding $750,000. Apollo was among several high-profile targets, including Blackstone, Bridgewater, Bain Capital, and others, though it remained unclear whether all of them suffered successful breaches until recently. Apollo, one of the world’s largest private equity firms, manages approximately $938 billion in assets. The company employs roughly 5,000 workers as of early 2026, according to its public regulatory filings. When contacted by TechCrunch, an Apollo spokesperson named Giovanna Falbo declined to comment further on the breach or confirm whether the company had paid a ransom. The lack of detailed response underscores the sensitivity of the situation and the potential reputational risks associated with such incidents. The breach coincides with a growing concern over cyber threats targeting the financial sector. In June, security researchers raised alarms about a surge in attacks against private equity and financial firms, suggesting that these organizations are increasingly becoming prime targets for organized cybercriminals. The methods employed by these attackers, particularly their reliance on social engineering, highlight a critical vulnerability in many corporate cybersecurity strategies. Employees remain a key point of entry for cybercriminals, especially when they are lured by impersonated support calls or deceptive digital interfaces designed to mimic legitimate internal systems. In addition to the direct impact on Apollo, the breach raises broader implications for the industry. As a major player in the private equity space, Apollo’s experience could serve as a case study for other firms seeking to bolster their defenses against similar threats. The company’s ownership stake in TechCrunch, a media outlet previously affiliated with Yahoo, adds another layer of complexity. Until 2025, TechCrunch operated as a subsidiary of Yahoo, which itself was owned by Apollo. This connection highlights how even non-financial entities within the Apollo ecosystem may be indirectly affected by such breaches. The ongoing investigation into the breach will likely focus on determining the exact scope of the data compromised and identifying any potential legal or regulatory consequences. Given the nature of the stolen information, there may be increased scrutiny from both government agencies and consumer protection bodies. Meanwhile, the broader cybersecurity community continues to monitor the evolving threat landscape, with experts urging companies to enhance employee training and implement more robust verification protocols to prevent future incidents.