Apollo confirms data breach amid hacking wave targeting financial firms

Apollo Global Management, one of the largest private equity firms in the world, has confirmed that hackers breached its systems through a social engineering attack earlier this summer. The incident, which took place between July 6 and 10, potentially exposed a trove of sensitive personal information including names, dates of birth, contact details, home addresses, and Social Security numbers. The disclosure lands at a particularly uncomfortable moment for the financial industry. Just weeks earlier, Google Threat Intelligence researchers published a report detailing a coordinated vishing campaign targeting some of the biggest names in American finance. A low-tech attack on a high-value target In Apollo’s case, the unauthorized access targeted certain cloud platforms during a narrow four-day window in early July. The firm has since begun notifying individuals whose data may have been compromised, following standard post-incident protocols required under US data-breach notification laws. Apollo manages hundreds of billions of dollars in assets across credit, private equity, and real assets. The firm trades on the New York Stock Exchange under the ticker APO. Part of a broader campaign...