Apollo Global Management confirmed a data breach that exposed personal information of individuals whose data was stored in its cloud systems, with the intrusion occurring between July 6 and July 10.

The incident follows a warning from security researchers at Google that a coordinated campaign was targeting private equity and financial firms as part of an extortion effort.

According to a letter filed with California’s attorney general, the breach resulted from a social engineering attack in which hackers called employees and pretended to be IT support, obtaining passwords and multi‑factor authentication codes. The attackers accessed names, birth dates, home addresses and Social Security numbers. Apollo’s human resources chief, Matthew Breitfelder, said the breach involved 5,000 employees as of February 2026. The company has not disclosed whether any of the data belonged to its own staff or to individuals affiliated with its portfolio companies. A spokesperson, Giovanna Falbo, declined to comment when contacted by TechCrunch.

Google reported that the same group of hackers, identified under names such as Falcon, Helix, Pink and Redact, have extorted other firms for ransoms up to $750,000. The campaign has targeted Blackstone, Bridgewater, Bain Capital and other financial institutions, though it was unclear whether those companies were breached.

Apollo has not indicated whether a ransom was paid, and the investigation into the breach remains ongoing.