Private equity firm Apollo confirms data breach amid hacking wave targeting financial giants
- ID
- 16416
- Status
- summarized
- Published
- 21 Aug 2026, 9:35 PM
- Fetched
- 21 Aug 2026, 10:35 PM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/08/21/private-equity-firm-apollo-confirms-data-breach-amid-hacking-wave-targeting-financial-giants/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 3.0
- Created
- 21 Aug 2026, 10:37 PM
- Tags
- Audience
- saas_founders
What happened
Apollo Global Management confirmed a data breach in a letter to California's attorney general, disclosing that hackers used social engineering to access its cloud environment between July 6 and July 10, stealing names, birth dates, contact information, and Social Security numbers. The campaign, tracked by Google researchers under names including Falcon, Helix, Pink, and Redact, also targeted Blackstone, Bridgewater, and Bain Capital, and relies on attackers impersonating IT helpdesk staff to trick employees into entering credentials and MFA codes.
Why it matters
The attack vector is helpdesk-impersonation social engineering, not a software vulnerability—so there is no patch to apply and no code-level takeaway for builders. The main practical signal is for SaaS founders handling employee or customer PII: cloud access via credential phishing remains the dominant breach path, and MFA alone did not stop it here.
Discussion angle
Whether your own helpdesk-impersonation defenses (verified callback protocols, IT support channel hardening) would survive this exact attack, and what that costs a small team to implement.