Apollo Confirms Personal Data Breach After Social-Engineering Attack
Summary
Apollo says attackers used social engineering to access its systems from July 6 to 10 and obtain personal data, including Social Security numbers. The company has not specified whose records were affected or whether a ransom was demanded.
Key points
- Apollo confirmed unauthorized access to its systems from July 6 to July 10.
- A filing with the California Attorney General said attackers used social engineering to gain access.
- The compromised information may include names, birth dates, contact details, home addresses, and U.S. Social Security numbers.
- Apollo did not specify whether the affected people were employees, individuals linked to portfolio companies, or both.
- The company did not clarify whether attackers demanded a ransom or whether Apollo paid.
Article Details
- Victim Organization
- Apollo Global Management
- Incident Type
- Cyberattack on cloud infrastructure involving social engineering and unauthorized access
- Data Types Exposed
- Names
- Dates of birth
- Contact details
- Home addresses
- U.S. Social Security numbers
- Operational Impact
- Attackers accessed Apollo's systems from July 6 to July 10 and obtained sensitive personal information. The article does not report operational disruption.
- Ransom Or Extortion
- Whether the attackers demanded a ransom or Apollo made any payments was not disclosed.
- Claim Status
- confirmed
People
Threat Actors
FalconNamed by Google as a group that frequently uses phone calls to target employees in an extortion campaign aimed at financial institutions and private equity funds; the article does not attribute the Apollo breach to this group.HelixNamed by Google as a group that frequently uses phone calls to target employees in an extortion campaign aimed at financial institutions and private equity funds; the article does not attribute the Apollo breach to this group.PinkNamed by Google as a group that frequently uses phone calls to target employees in an extortion campaign aimed at financial institutions and private equity funds; the article does not attribute the Apollo breach to this group.RedactNamed by Google as a group that frequently uses phone calls to target employees in an extortion campaign aimed at financial institutions and private equity funds; the article does not attribute the Apollo breach to this group.