Apollo discloses data breach from ongoing wave of attacks hitting financial sector
Apollo Global Management confirmed a breach of cloud platforms by BlackFile-linked social engineering attackers, exposing personal data including Social Security numbers.
Apollo Global Management disclosed that attackers accessed some of its cloud platforms between July 6 and July 10, 2026. The company determined on August 12 that compromised data included names, dates of birth, contact information, home addresses, and Social Security numbers. Google attributed the broader campaign against financial sector organizations to BlackFile, a threat group affiliated with The Com that operates extortion brands Redact, Pink, Helix, and Falcon. Apollo, which manages $1.05 trillion in assets, is the first victim to formally confirm sensitive personal data was compromised in this wave, with Blackstone and Bain Capital also reportedly targeted.
- Cloud platforms breached over five days in early July via social engineering
- Data compromised includes names, addresses, and Social Security numbers
- Google attributed the campaign to BlackFile, tied to The Com extortion ecosystem
- Blackstone and Bain Capital also targeted, though compromise is unconfirmed
- Extortion demands typically start around $3 million, negotiated under $1 million
- Tags
- apollo-global-managementblackfiledata-breachextortionfinancial-sectorprivate-equitysocial-engineeringthe-com
- Vendors
- Apollo Global Management
- Products
- Google Cloud
- Victims
- Apollo Global Management
- Organizations
- GoogleBlackstoneBain Capital
- Countries
- United States
From the original article
3 min read at cyberscoop.com
The private equity firm said attackers broke into some of its cloud platforms during a five-day period in early July, compromising sensitive personal data. The logo of Apollo Global Management is displayed on a smartphone in front of abstract background.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.