Apollo Global Management confirms data breach via cloud platform access

Apollo Global Management has confirmed a data breach involving unauthorized access to its cloud platforms between July 6 and July 10, 2026. The intrusion was achieved through social engineering and phishing tactics, where attackers used deceptive websites and phone-based deception to extract employee credentials.

The breach compromised sensitive personal information, including names, dates of birth, home addresses, contact information, and Social Security numbers. Apollo stated that no financial account details or proprietary business information were compromised. The firm is offering 24 months of complimentary credit monitoring and identity protection to affected individuals.

Apollo is part of a broader wave of social engineering attacks targeting the financial sector, including other major firms such as Blackstone, KKR, and Bain Capital. While Apollo has not named a specific perpetrator, Google recently attributed a similar campaign to BlackFile, a threat group affiliated with The Com.