Private equity firm Apollo Global Management has confirmed a data breach after hackers accessed part of its cloud environment through a social engineering scheme. The company said the incident took place between July 6 and July 10.
According to the filing submitted to California's attorney general, the stolen data included names, birth dates, contact details such as home addresses, and Social Security numbers. Apollo has not specified whether the affected records belonged to employees, portfolio company staff, or other individuals connected to the firm.
The disclosure arrives shortly after Google security researchers warned that financial and private equity firms were being targeted in a broader extortion campaign. Those attacks often rely on fake help desk calls and spoofed login pages to capture passwords and multi-factor authentication codes.
Apollo is among the world's largest private equity groups, managing about $938 billion in assets and employing roughly 5,000 people. The company has not publicly detailed whether any ransom demand was made or how the breach was contained.
This case highlights how identity-based attacks are becoming a central challenge for major financial institutions, pushing the industry toward stronger verification, cloud security, and employee training. The next phase of digital finance will likely be shaped by more resilient defenses and smarter trust systems.
