Private equity firm Apollo Global Management has confirmed that it suffered a significant data breach, in which hackers accessed its cloud systems and stole personal information. The company disclosed the incident in a letter filed with California's attorney general, revealing that the breach occurred between July 6 and July 10 after a social engineering attack tricked employees into giving up login credentials. Information taken includes names, birth dates, contact details, and Social Security numbers, although it is unclear exactly whose data was compromised.

Apollo is among the largest private equity firms globally, with $938 billion in assets under management and around 5,000 employees as of early 2026. The breach comes amid a broader wave of cyberattacks targeting financial services firms, including other private equity giants like Blackstone and Bain Capital. Security researchers had earlier warned about coordinated hacking campaigns focused on these companies, often involving sophisticated social engineering tactics to bypass multi-factor authentication.

According to Google’s security researchers, the hacking groups behind these attacks—known by names such as Falcon, Helix, and Redact—typically use calls impersonating IT support to deceive employees into entering credentials on fake login pages. After gaining access, they steal sensitive data and attempt to extort affected companies with ransom demands that can reach up to $750,000. Apollo has not commented on whether a ransom was paid as part of this breach.

This confirmed incident follows recent alerts from cybersecurity experts about increasing risks facing major financial institutions’ cloud environments. Apollo Global Management’s breach highlights the heightened challenges these firms face protecting critical data from evolving extortion-focused cyber threats. TechCrunch reported this story on August 21, 2026, underscoring growing concerns in the private equity sector regarding cybersecurity vulnerabilities.