Apollo Global Management confirmed that hackers breached its cloud systems and took employee personal data, according to TechCrunch. The $938 billion asset management giant is now the latest target in a wave of coordinated cyberattacks on major financial firms.

Apollo's HR chief Matthew Breitfelder said social engineering attacks, hackers posing as IT support, gave attackers access to the company's systems between July 6 and July 10. The stolen data included names, birth dates, home addresses, and Social Security numbers. Google researchers had warned weeks earlier about a coordinated campaign targeting private equity and financial companies.

The hackers' method is straightforward. TechCrunch reports that Google identified the attackers operating under names like Falcon, Helix, Pink, and Redact. They call employees, pose as IT support, trick them into entering credentials and multi-factor authentication codes into fake login portals, then access the network. Some victims have paid up to $750,000 to keep their data from being released.

Apollo is not alone. Reuters reported that the same hackers have targeted Blackstone, Bridgewater, and Bain Capital. Apollo's public confirmation of a breach shows these are credible threats. The hackers have moved beyond reconnaissance.

For employees caught in this breach, the consequences are immediate. Their home addresses and Social Security numbers are now in criminal hands, opening the door to identity theft and fraud. Apollo has not said whether it paid a ransom. Most companies do not publicly confirm payouts, but the damage control costs are substantial either way.

This is a critical moment for private equity. These firms have long relied on operational security and confidentiality as core business practices. Yet they have proven as vulnerable to social engineering as any mid-size startup. Hacking campaigns targeting the ultra-wealthy were once treated as isolated incidents. This coordinated wave changes that calculus. Every major financial firm is now a target, and traditional firewall confidence is no longer sufficient.

Apollo declined to comment when TechCrunch asked about ransom payments or next steps. Given the scale of the breach and the hackers' track record, expect more announcements from the private equity world in the coming weeks.