Apollo Global Management Reports Data Breach from Phishing Attack

Apollo Global Management announced on August 21, 2026, that it experienced unauthorized access to its cloud platforms due to a coordinated phishing campaign. The breach occurred over a four-day period from July 6 to July 10, exposing personal data of individuals associated with the firm, including names, dates of birth, home addresses, contact information, and Social Security numbers. However, the company confirmed that no financial account details or proprietary business information were compromised.

The attackers employed social engineering tactics, impersonating legitimate Apollo websites and using phone deception to extract employee credentials. This approach allowed them to remain undetected for approximately four days. In response to the breach, Apollo has engaged external cybersecurity experts to assist with the investigation and has begun notifying affected individuals and relevant regulators.

As a precautionary measure, Apollo is offering 24 months of complimentary credit monitoring and identity protection services to those impacted. Preliminary findings indicate that the stolen data has not been publicly released or used for fraudulent activities, although investigators warn that this does not guarantee that it will not be misused in the future.

The phishing campaign also targeted several other major private equity firms, including Blackstone, KKR, and Bain Capital. Apollo, a publicly traded company on the NYSE under the ticker APO, is one of the largest alternative asset managers globally, highlighting the effectiveness of basic phishing techniques in breaching sophisticated cloud environments.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News