Apollo Global Management confirms data breach after social engineering attack

Human resources chief Matthew Breitfelder stated that unauthorized parties gained access to the firm’s cloud environment between July 6 and July 10. While the filing confirms the theft of personal identifiers, it remains unclear whether the victims were direct Apollo employees or individuals associated with the company’s vast portfolio of holdings. Company spokesperson Giovanna Falbo did not respond to inquiries regarding the breach or potential ransom demands.

The incident aligns with a broader extortion campaign identified by Google security researchers, who have tracked hackers—operating under aliases like Falcon and Helix—targeting major financial institutions. These attackers typically pose as IT support staff to trick employees into surrendering credentials and multi-factor authentication codes. Once inside, they exfiltrate sensitive files to leverage for payouts, with some recorded ransoms reaching $750,000. Apollo, which employs approximately 5,000 people, joins a list of high-profile financial firms previously identified by investigators as targets of this ongoing operation.