Apollo Global Management Confirms Cyber Breach Exposing Personal Data

Apollo Global Management, a leading alternative asset manager, disclosed a significant cyber breach that occurred between July 6 and July 10, 2023. During this four-day window, hackers accessed sensitive personal information, including names, dates of birth, home addresses, and Social Security numbers.

The breach was attributed to a social engineering attack, where attackers used phishing techniques to trick employees into revealing their credentials. This method did not involve sophisticated malware but rather relied on impersonation and deception.

Apollo began notifying affected individuals on August 20, approximately six weeks after the breach was detected. The firm is offering complimentary identity protection and credit monitoring services to those whose data was compromised. Notifications were also sent to the California attorney general's office, complying with state data breach disclosure laws.

As of now, there is no evidence that the stolen data has been publicly released or used for fraudulent activities. Apollo's breach is part of a broader trend of cyberattacks targeting financial institutions through similar social engineering tactics, with other firms like Blackstone and CME Group reportedly facing similar threats.

The company has engaged law enforcement and external cybersecurity experts to conduct a thorough investigation, which is still ongoing. This incident underscores the vulnerabilities within financial firms and the effectiveness of basic phishing techniques in breaching security protocols.