Apollo Global Management Confirms Breach After Employees Fooled by Fake IT Staff

Apollo Global Management, the private equity giant, disclosed a breach in which attackers gained unauthorized access to its cloud environment between July 6 and July 10, 2026, using social engineering — calling employees directly on personal cellphones while posing as internal IT help desk staff, in some cases spoofing the company's real help desk phone number on caller ID.

No Malware, No Exploit — Just a Convincing Phone Call

This breach required no software vulnerability at all — the entire intrusion path ran through convincing a human employee that a phone call was legitimate. Exposed records may include names, birth dates, home addresses, contact details, and Social Security numbers. Apollo found no evidence the data has been publicly posted or used for fraud, and began sending written notifications dated August 21, 2026, offering 24 months of complimentary credit monitoring.

• Caller ID spoofing specifically defeats one of the most common informal verification checks employees use ("the number matches our real help desk") — a reminder that caller ID alone is not a reliable authentication signal
• This lands amid what TechCrunch described as a broader hacking wave specifically targeting financial giants using similar social engineering tactics — Apollo is one instance of a pattern, not an isolated case
• The technical sophistication bar for this attack was genuinely low — the actual investment was in research and persuasive execution of the phone call, not exploit development, which is a different threat model than most security awareness training assumes