Apollo Global Management reports unauthorized access to cloud platforms

Apollo Global Management confirmed on August 21, 2026, that attackers gained unauthorized access to its cloud platforms over a four-day window between July 6 and July 10. The breach exposed personal data including names, dates of birth, home addresses, contact information, and Social Security numbers. Notably, no financial account details or proprietary business information were compromised. What happened and how The attackers did not need sophisticated malware or zero-day exploits. They used phishing, the digital equivalent of a convincing phone call from someone pretending to be your IT department. According to the investigation, the campaign relied on social engineering tactics: impersonating websites designed to mimic legitimate Apollo infrastructure, combined with phone-based deception to extract employee credentials. Once inside, the attackers had roughly four days before being detected. Apollo has retained external cybersecurity experts to assist with the investigation and has begun notifying both affected individuals and the relevant regulators. As a remediation measure, the firm is offering 24 months of complimentary credit monitoring and identity protection services to th...