[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8S7kBgCROoHdipsWlRfEXEF_k0KU8BnL75IYh4ed_SI":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"f704e2dc-d121-4527-9619-af2eac7cbd47","Apollo discloses data breach from ongoing wave of attacks hitting financial sector","apollo-discloses-data-breach-from-ongoing-wave-of-attacks-hitting-financial-sect-d6e8d2","The private equity firm said attackers broke into some of its cloud platforms during a five-day period in early July, compromising sensitive personal data. The post Apollo discloses data breach from ongoing wave of attacks hitting financial sector appeared first on CyberScoop.","Private equity firm Apollo Global Management has disclosed a data breach resulting from social engineering attacks that targeted its cloud platforms between July 6 and July 10. The attackers compromised sensitive personal data, including names, dates of birth, contact information, home addresses, and Social Security numbers. Google attributes the ongoing campaign to the BlackFile threat group, affiliated with The Com, which has been targeting various financial and professional services firms.","Apollo Global Management confirms data breach impacting sensitive personal information due to social engineering","https:\u002F\u002Fcyberscoop.com\u002Fapollo-discloses-data-breach-social-engineering-attack\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F08\u002FGettyImages-2266472644.jpg","2026-08-21T19:14:28+00:00","2026-08-21T20:00:19.542232+00:00",8,[17,20,23,25,28,30],{"name":18,"type":19},"Google","vendor",{"name":21,"type":22},"BlackFile","threat_actor",{"name":24,"type":22},"The Com",{"name":26,"type":27},"Redact","product",{"name":29,"type":27},"Pink",{"name":31,"type":27},"Helix","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":32,"icon":34,"name":35,"slug":36},null,"Breaches","breaches",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,26,29],{"controls":58,"vendors":140},[59,88,114],{"slug":60,"name":61,"problem":62,"products":63},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":89,"name":90,"problem":91,"products":92},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[93,98,106],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":94,"product_name":95,"url":96,"description":97},"defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"slug":115,"name":116,"problem":117,"products":118},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[119,127,133],{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":128,"product_name":129,"url":131,"description":132},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":115,"product_name":137,"url":138,"description":139},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[141],{"slug":142,"name":18,"logo_path":143,"roles":144},"google","\u002Fvendor-logos\u002Fgoogle.png",[145],"reported_by",{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":163},"social-engineering-breach-at-apollo-exposes-sensitive-pii-via-cloud-platform-compromise","Social Engineering Breach at Apollo Exposes Sensitive PII via Cloud Platform Compromise","Apollo Global Management suffered a data breach after threat actors from the BlackFile\u002FThe Com group used social engineering tactics to compromise cloud platforms over a four-day window, exposing highly sensitive personal data including Social Security numbers and home addresses. The root cause lies in insufficient human-layer defenses — employees or vendors were manipulated into granting access that bypassed technical controls. This breach is part of a coordinated campaign targeting the financial sector, highlighting that even well-resourced firms remain vulnerable when social engineering countermeasures are underdeveloped. The exposure of PII at this scale carries significant regulatory, reputational, and legal consequences for affected individuals and the firm alike.",[151,152,153,154,155,156,157,158,159,160,161,162],"CIS Control 4 – Controlled Use of Administrative Privileges","CIS Control 14 – Controlled Access Based on Need to Know","CIS Control 17 – Implement a Security Awareness and Training Program","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 AT-2 – Security Awareness Training","NIST SP 800-53 IA-5 – Authenticator Management","NIST SP 800-53 SI-4 – Information System Monitoring","NIST CSF ID.AM-3 – Organizational Communication and Data Flows","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of a Personal Data Breach","SEC Cybersecurity Disclosure Rule (17 CFR Part 229\u002F249)","NIST SP 800-61 – Computer Security Incident Handling Guide",{}]