Apollo Global Management confirmed on August 21, 2026, that attackers gained unauthorized access to its cloud platforms over a four-day window between July 6 and July 10. The breach exposed personal data including names, dates of birth, home addresses, contact information, and Social Security numbers.
Notably, no financial account details or proprietary business information were compromised.
What happened and how
The attackers did not need sophisticated malware or zero-day exploits. They used phishing, the digital equivalent of a convincing phone call from someone pretending to be your IT department.
According to the investigation, the campaign relied on social engineering tactics: impersonating websites designed to mimic legitimate Apollo infrastructure, combined with phone-based deception to extract employee credentials. Once inside, the attackers had roughly four days before being detected.
