Apollo Global Management, one of the largest alternative asset managers in the world, disclosed that hackers broke into its cloud systems in early July and made off with sensitive personal information including Social Security numbers, names, dates of birth, and home addresses.
The unauthorized access lasted from July 6 to July 10, giving attackers a four-day window inside the firm’s infrastructure. Apollo attributed the breach to a social engineering attack, the kind of low-tech con where someone tricks an employee into handing over credentials rather than exploiting some exotic zero-day vulnerability.
What was stolen and who’s been told
The compromised data reads like a starter kit for identity theft: full names, dates of birth, contact information, home addresses, and Social Security numbers.
Apollo began notifying affected individuals around August 20, roughly six weeks after the breach window closed. The firm is offering complimentary identity protection and credit monitoring services to those whose data was exposed.
