Apollo Global Management breached in social engineering attack
Investment giant Apollo's cloud systems compromised.
1Apollo's cloud systems breached
Apollo Global Management disclosed a social engineering attack in July 2023. Attackers gained unauthorized access to cloud systems and stole personal information. The company detailed the incident in a notification to the California Attorney General, stating the breach occurred between July 6-10. Apollo did not reveal which cloud platforms were affected or the number of individuals impacted.
2What information was stolen?
Apollo's investigation revealed that attackers accessed sensitive data, including names, birth dates, contact information, home addresses, and Social Security numbers. The company stated there is no evidence the information has been publicly shared or used for identity theft. Affected individuals were offered 24 months of credit monitoring and identity protection services.
3How did the attack happen?
Attackers impersonated IT support staff and contacted employees on their personal phones. They directed users to spoofed login pages designed to steal credentials and multi-factor authentication codes. Using this method, they infiltrated cloud systems and stole corporate data.
4UNC6671's involvement
Google warned that UNC6671, an extortion-focused group, targeted private equity firms. Apollo, Blackstone, and Bridgewater were among the targeted companies. While Apollo did not attribute the breach to UNC6671, it linked the incident to similar attacks. The group steals corporate data and demands ransoms, with some payments reaching $750,000.
5Measures taken by Apollo
Upon detecting the incident, Apollo notified law enforcement and engaged external cybersecurity experts. Security protocols were enhanced, and a comprehensive investigation was launched. The company stated it has increased precautions against similar attacks and provided support to affected individuals.
6Other attacks in the sector
Apollo's breach resembles other social engineering attacks in the financial sector. Levi Strauss also disclosed this month that three employees' computers were compromised, resulting in stolen corporate data. Such attacks prompt companies to review their security measures.
7The threat of social engineering
Social engineering attacks have become an effective way to bypass corporate cybersecurity measures. Attackers exploit employees' trust to infiltrate systems and steal sensitive information. These attacks pose a significant threat, especially in the financial sector.
8Apollo's next steps
Apollo continues to mitigate the impact of the attack. The company aims to prevent similar incidents by strengthening security protocols. Credit monitoring and identity protection services offered to affected individuals may help alleviate the breach's effects. However, the full scope and impact of the attack remain unclear.