Apollo discloses data breach from ongoing wave of attacks hitting financial sector

Apollo Global Management suffered a data breach after threat actors from the BlackFile/The Com group used social engineering tactics to compromise cloud platforms over a four-day window, exposing highly sensitive personal data including Social Security numbers and home addresses. The root cause lies in insufficient human-layer defenses — employees or vendors were manipulated into granting access that bypassed technical controls. This breach is part of a coordinated campaign targeting the financial sector, highlighting that even well-resourced firms remain vulnerable when social engineering countermeasures are underdeveloped. The exposure of PII at this scale carries significant regulatory, reputational, and legal consequences for affected individuals and the firm alike.