# AI voice‑phishing attacks on US hedge funds

> Live situation record from CLSTR: https://clstr.news/situations/ai-voicephishing-attacks-on-us-hedge-funds
> Updated: 2026-08-05T16:50:40.000Z. Sources: 22. Developments: 2.

In early August 2026, a coordinated wave of AI‑generated voice‑phishing (vishing) attacks targeted several of the largest U.S. hedge funds and private‑equity firms, including Point72 Asset Management, Citadel, Two Sigma Investments, Millennium Management and others. Hackers used synthetic voice clones to impersonate senior executives and IT staff, attempting to obtain login credentials and system access.

Point72 confirmed the intrusion attempt but reported no client data was taken; Two Sigma said its security team stopped the attack with no impact to its systems, and other firms declined comment. Security experts highlighted the scalability of AI tools, allowing threat actors to expand from dozens to thousands of targets.

Google’s Threat Intelligence Group later identified the attackers operating under names such as Redact, Pink, Falcon and Helix, noting a shift toward private‑equity firms, law firms and rating agencies. The White House convened a working group of AI developers and critical‑infrastructure operators to share threat intelligence and improve defenses against AI‑powered cyber threats.

## Claims

- Hackers used AI‑generated voice‑cloning (vishing) to target hedge funds and private‑equity firms. (corroborated by 8 sources)
- Targeted firms include Point72 Asset Management, Two Sigma Investments, Citadel, Millennium Management, Blackstone, KKR and Bridgewater Associates. (corroborated by 8 sources)
- AI tools enable attackers to scale from targeting about 50 entities to as many as 1,000 in a single operation. (corroborated by 7 sources)
- Point72 and Two Sigma reported that no client data was stolen and that their security teams blocked the attacks. (corroborated by 5 sources)
- The hackers operate under the names Redact, Pink, Falcon and Helix. (corroborated by 5 sources)
- Google reported the campaign and said the attackers have shifted focus to private‑equity, law firms and rating agencies. (corroborated by 5 sources)
- The attacks are part of a broader surge in AI‑powered cyberattacks on financial institutions worldwide. (corroborated by 5 sources)
- The White House has convened a working group of AI developers and critical‑infrastructure operators to share threat intelligence and improve defenses against AI‑powered cyber threats. (corroborated by 4 sources)

## Timeline

### 2026-08-05: US Hedge Funds Targeted by AI Voice‑Phishing Attacks

AI‑driven voice‑phishing attacks targeted US hedge funds and private‑equity firms; firms report no data loss, while security teams blocked the attempts.

20 sources. https://clstr.news/cluster/hackers-attempt-cyberattacks-on-top-wall-street-hedge-funds

### 2026-08-05: Cyberattack Targets Major Wall Street Firms Including Point72 and Citadel

A coordinated cyber‑attack using phone‑phishing targeted major Wall Street firms such as Point72, Two Sigma and Citadel; no client data was reported stolen.

2 sources. https://clstr.news/cluster/cyberattack-targets-major-wall-street-firms-including-point72-and-citadel

---
Cite as: AI voice‑phishing attacks on US hedge funds. CLSTR, https://clstr.news/situations/ai-voicephishing-attacks-on-us-hedge-funds