Apollo Global Management Confirms Data Breach Affecting Personal Information

Data Breach Confirmed by Apollo

Apollo Global Management, a private equity firm, has confirmed a data breach. Hackers gained unauthorized access to the company's cloud systems and exfiltrated personal information. The confirmation was made in a letter filed with California’s attorney general.

Details of the Attack

According to Matthew Breitfelder, Apollo's human resources chief, the breach occurred between July 6 and July 10. The attackers used a social engineering method to access the company's cloud environment. The stolen data includes names, birth dates, contact information (including home addresses), and Social Security numbers. The letter did not specify whose data was compromised, such as employees or individuals from portfolio companies.

Part of a Broader Campaign

This incident follows warnings from Google security researchers about an ongoing hacking campaign targeting financial and private equity firms. The hackers, known by various names including Falcon, Helix, Pink, and Redact, primarily use social engineering. They impersonate IT support to trick employees into providing login credentials and multi-factor authentication codes, gaining access to corporate networks. After data exfiltration, the hackers typically extort companies for ransom, threatening to publish the stolen information.

Impact and Context

Apollo Global Management manages $938 billion in assets. The confirmed breach highlights the effectiveness of social engineering tactics against large financial institutions. Previous reports indicated that other major firms like Blackstone, Bridgewater, and Bain Capital were also targeted in this campaign, with some ransoms reaching up to $750,000.