Apollo Global Management Data Breach

Private equity giant Apollo Global Management says hackers used a phone-based social engineering scheme, not a technical exploit, to steal Social Security numbers and home addresses from its cloud systems.

Apollo Management Holdings, L.P., the entity behind private equity giant Apollo Global Management, has notified individuals of a data breach after hackers gained unauthorized access to certain cloud platforms between July 6 and July 10, 2026. Apollo says it learned on August 12, 2026 that the information involved included names, dates of birth, contact information, home addresses, and Social Security numbers. Apollo reported the breach to the California Attorney General on August 20, 2026.

Source: Apollo’s own Notice of Data Breach letter; California Attorney General data-breach notification list (reported 08/20/2026); TechCrunch and Insurance Journal reporting (08/21/2026).

Hackers Didn’t Need to Break In. They Called and Asked.

According to TechCrunch and Insurance Journal, Apollo’s head of human capital, Matthew Breitfelder, confirmed that the breach resulted from a social engineering attack rather than a traditional technical intrusion. Reporting attributes the campaign to a hacking group tracked under multiple names, including Falcon, Helix, Pink, and Redact, known for calling employees and posing as IT helpdesk staff to trick them into granting access. The same reporting describes this as part of a broader wave of similar attacks against financial and private equity firms in 2026.

What Information Was Exposed?

According to Apollo’s notice letter, the information involved included:

• Name
• Date of birth
• Contact information
• Home address
• Social Security number

How Many People Are Affected?

Apollo has not disclosed a total number of affected individuals. Its California Attorney General filing indicates at least 500 California residents were affected, the threshold that triggers that filing requirement, but the true nationwide total, given Apollo’s size as a global asset manager, has not been made public.

What Is Apollo Offering Affected Individuals?

Apollo is offering complimentary credit monitoring and identity protection services through Cyberscout, a TransUnion company, for 24 months from the date of enrollment, along with proactive fraud assistance. Affected individuals can enroll at bfs.cyberscout.com/activate using the unique code provided in their letter and must do so within 90 days of the letter date. Representatives are available at 1-833-851-9983, Monday through Friday, 8 a.m. to 8 p.m. Eastern, for 90 days from the letter date.

Your Information Is at Risk

A Social Security number paired with a home address and date of birth is enough for criminals to open new credit, apply for loans, or file a fraudulent tax return in someone else’s name. Because this breach stemmed from a social engineering campaign specifically targeting financial-firm employees and clients, affected individuals should also be alert to follow-on phishing calls or messages that reference Apollo or this incident by name. Apollo says it has no evidence the information has been publicly posted or used for identity theft or fraud at this time.

Do You Have Legal Options?

Financial firms that collect and store Social Security numbers and other sensitive personal information have a legal duty to secure that data and to notify affected individuals without unreasonable delay.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review if you received a notice letter from Apollo.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Residents of California may be entitled to additional protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights regarding the collection, use, and safeguarding of personal information.

FAQ

Who is affected by the Apollo data breach?

Apollo has not disclosed a total number of affected individuals. Its California Attorney General filing confirms at least 500 California residents affected; the nationwide total has not been made public.

What information was exposed?

Name, date of birth, contact information, home address, and Social Security number, according to Apollo’s own notice letter.

How did the breach happen?

Apollo says hackers gained unauthorized access to certain cloud platforms between July 6 and July 10, 2026. Reporting from TechCrunch and Insurance Journal attributes the intrusion to a social engineering scheme, meaning hackers manipulated employees rather than exploiting a technical vulnerability.

Is Apollo offering credit monitoring?

Yes. Apollo is offering 24 months of complimentary credit monitoring and identity protection through Cyberscout, plus proactive fraud assistance, with enrollment required within 90 days of the letter date.

Has my information actually been misused?

Apollo says it has no evidence that the information has been publicly posted or used for identity theft or fraud at this time. That does not mean the underlying exposure didn’t happen, only that no confirmed misuse has been reported yet.

Do I have a legal claim?

Financial firms that collect and store Social Security numbers and other sensitive personal information have a legal duty to secure that data and to notify affected individuals without unreasonable delay. If you received a notice letter from Apollo, contact the Data Breach Attorneys at Emery | Reddy at 206.207.8929 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.