Apollo Says Hackers Stole Personal Data in Cloud Breach

Apollo Global Management, the New York-based alternative asset manager, is the latest major Wall Street firm to disclose a cyber breach amid a campaign targeting dozens of US financial institutions. Attackers have used phone-based social engineering and fraudulent websites to steal employee credentials, seeking leverage for extortion. The episode highlights the exposure of private-capital firms that hold sensitive employee, client and transaction data.

Apollo said on Aug. 21 that unauthorized users accessed certain cloud platforms from July 6 through July 10. Potentially compromised data included names, dates of birth, contact details, home addresses and Social Security numbers. The firm notified law enforcement and hired outside cybersecurity and forensic specialists. It has not disclosed the number of victims or any financial loss, and said it had found no evidence that the stolen information had been published or used for fraud.