--- title: Private equity firm Apollo confirms data breach amid... description: Private equity giant Apollo Global Management confirmed hackers stole personal data, including names, birth dates, home addresses, and Social Security numbers,... canonical: https://daily.dev/posts/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants-nw1hhnrrw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants | daily.dev og:description: Private equity giant Apollo Global Management confirmed hackers stole personal data, including names, birth dates, home addresses, and Social Security numbers,... og:url: https://daily.dev/posts/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants-nw1hhnrrw og:image: https://api.daily.dev/og/posts/nW1hhNrRw.png og:image:alt: Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants **[TechCrunch](https://daily.dev/sources/tc)** · 2 min read · 0 upvotes · 0 comments ## Summary Private equity giant Apollo Global Management confirmed hackers stole personal data, including names, birth dates, home addresses, and Social Security numbers, from its cloud environment between July 6 and July 10. The company disclosed the breach in a filing with California's attorney general, attributing the intrusion to a social engineering attack. The incident follows a Google-reported extortion campaign, run by threat actors known as Falcon, Helix, Pink, and Redact, targeting private equity and financial firms including Blackstone, Bridgewater, and Bain Capital by calling employees and impersonating IT helpdesks to steal credentials and MFA codes. Some victims reportedly paid ransoms up to $750,000. Apollo has not confirmed whether it paid a ransom. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What happened in the Apollo Global Management data breach? Hackers used a social engineering attack to access Apollo Global Management's cloud environment between July 6 and July 10, stealing names, birth dates, contact information including home addresses, and Social Security numbers. Apollo disclosed the incident in a letter filed with California's attorney general and has not said whether affected individuals are employees or people at portfolio companies, or whether it paid a ransom. _Security teams tracking breaches at financial firms can follow incident disclosures like this on daily.dev._ ### How are hackers targeting private equity and financial companies with social engineering attacks? Threat actors identified by Google as Falcon, Helix, Pink, and Redact call employees while posing as IT helpdesk or support staff, tricking them into entering passwords and multi-factor authentication codes into spoofed login portals. Once inside corporate networks, the attackers steal data and then extort victims for ransom, threatening to publish stolen information on a leak site if payment as high as $750,000 isn't made. _Anyone defending against helpdesk impersonation attacks can track these campaigns on daily.dev._ --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants-nw1hhnrrw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants","url":"https://daily.dev/posts/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants-nw1hhnrrw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants-nw1hhnrrw"},"datePublished":"2026-08-21T13:38:34.471Z","dateModified":"2026-08-24T14:47:14.462Z","description":"Private equity giant Apollo Global Management confirmed hackers stole personal data, including names, birth dates, home addresses, and Social Security numbers,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/debe302a5dc7b8db1ab539721baa84ed?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/debe302a5dc7b8db1ab539721baa84ed?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants-nw1hhnrrw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,data-breach","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants-nw1hhnrrw#faq","mainEntity":[{"@type":"Question","name":"What happened in the Apollo Global Management data breach?","acceptedAnswer":{"@type":"Answer","text":"Hackers used a social engineering attack to access Apollo Global Management's cloud environment between July 6 and July 10, stealing names, birth dates, contact information including home addresses, and Social Security numbers. Apollo disclosed the incident in a letter filed with California's attorney general and has not said whether affected individuals are employees or people at portfolio companies, or whether it paid a ransom. Security teams tracking breaches at financial firms can follow incident disclosures like this on daily.dev."}},{"@type":"Question","name":"How are hackers targeting private equity and financial companies with social engineering attacks?","acceptedAnswer":{"@type":"Answer","text":"Threat actors identified by Google as Falcon, Helix, Pink, and Redact call employees while posing as IT helpdesk or support staff, tricking them into entering passwords and multi-factor authentication codes into spoofed login portals. Once inside corporate networks, the attackers steal data and then extort victims for ransom, threatening to publish stolen information on a leak site if payment as high as $750,000 isn't made. Anyone defending against helpdesk impersonation attacks can track these campaigns on daily.dev."}}]} ```