Apollo Global Management Hit by Social Engineering Attack and Data Breach

Apollo Global Management announced on August 21 that it experienced a social engineering attack resulting in a data breach. The investigation revealed unauthorized access to some of the company's cloud platforms from July 6 to July 10. The compromised information may have included names, dates of birth, contact details, home addresses, and Social Security numbers.

The company has no evidence that the stolen data has been publicly shared or used for identity theft or fraud. Apollo's global head of human capital, Matthew Breitfelder, stated that the incident was similar to those suffered by other financial services firms. The company promptly reported the incident to law enforcement, engaged outside cybersecurity and forensic experts, strengthened security protocols, and initiated an investigation.

Google Threat Intelligence Group (GTIG) reported in an August 6 blog post about a voice phishing (vishing) campaign targeting financial services, private equity, and professional services firms, aiming to achieve data theft and extortion. In June, GTIG and Mandiant, another Google cybersecurity organization, warned that data theft extortion groups were targeting professional, legal, and financial services organizations by impersonating IT support.

The FBI reported in May that the Silent Ransom Group (SRG) has been conducting data theft and extortion operations since at least 2022, posing as IT department employees since spring 2026. This group consistently targets law firms in the United States and companies in the insurance, finance, and healthcare industries. A PYMNTS Intelligence report from December found that financial institutions face increasingly sophisticated, adaptive, and evolving fraud attempts.

Fraud remains a moving target as fraudsters refine tactics to exploit emerging vulnerabilities, while institutions adapt their defenses using new technologies, analytics, and operational strategies.