Reported by 3 outlets

Timeline

1. update from cyberscoop.com

   Apollo discloses data breach from ongoing wave of attacks hitting financial sector

   cyberscoop.com · 53d ago · August 21st, 2026

   Apollo Global Management confirmed it was among several financial institutions impacted by a string of social engineering attacks that hit the sector last month, the company said Friday. Attackers gained unauthorized access to some of the private equity firm’s cloud platforms between July 6 and July 10, the company said in a data breach notification filed in California. Apollo did not say when or how it became aware of the intrusion and did not respond to a request for comment. Apollo is the first victim to formally disclose that sensitive personal data under its care was compromised by a wave of attacks that have hit large private equity firms, law firms, financial rating agencies and medical technology companies. The company did not name the group responsible for the attack. Yet, Google earlier this month attributed the ongoing campaign to BlackFile , a threat group affiliated with The Com , that recently split its extortion operations across four brands with shared infrastructure: Redact, Pink, Helix and Falcon. “Upon detecting the incident, we promptly notified law enforcement, engaged leading outside cybersecurity and forensic experts, enhanced our security protocols, and launched an investigation,” Matthew Breitfelder, global head of human capital at Apollo, wrote in the disclosure notice. As part of its ongoing investigation, Apollo said it determined on Aug. 12 that personal data including names, dates of birth, contact information, home addresses and Social Security

2. update from cyberpress.org

   Apollo Global Data Breach Exposes Names, Addresses and Social Security Numbers

   cyberpress.org · 52d ago · August 22nd, 2026

   Apollo Global Management has disclosed a July cyber incident in which attackers gained unauthorized access to cloud platforms and potentially obtained highly sensitive personal information. The New York-based alternative asset manager said the intrusion occurred between July 6 and July 10 after a social-engineering attack . Apollo has not publicly attributed the activity to a named group or detailed the precise initial-access mechanism. Apollo Global Data Breach The identified data categories create a material identity theft risk. A name, birth date, address and Social Security number can be used to support fraudulent account applications, targeted impersonation and convincing phishing campaigns . Home address and contact data can also help attackers tailor lures that appear to originate from employers, banks, insurers, or government bodies. Apollo said it found no evidence that the information had been publicly posted or used for identity theft or fraud at the time of notification. The absence of public evidence, however, should not be treated as confirmation that data has not been copied, traded privately, or retained for later abuse. Investigations into cloud account compromise often evolve as log analysis, endpoint evidence, and third-party intelligence become available.

3. update from gbhackers.com

   Apollo Global Management Data Breach Exposes Social Security Numbers and Personal Data

   gbhackers.com · 52d ago · August 22nd, 2026

   The company has not […] The post Apollo Global Management Data Breach Exposes Social Security Numbers and Personal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .