Overview
- Apollo said hackers used a social-engineering attack to gain access to certain cloud systems between July 6 and July 10, and the company reported the intrusion in a letter to California regulators.
- The firm said the attackers stole names, dates of birth, contact details including home addresses, and Social Security numbers from the cloud environment.
- Apollo did not specify whether the stolen records belonged to employees, people at companies it owns, or others, and the company has not said if it paid a ransom.
- Google security researchers and reporting name groups using tactics of phone calls and spoofed login pages to capture passwords and MFA codes, and past incidents linked to the campaign have yielded ransoms reported up to $750,000.
- Apollo notified law enforcement, hired outside forensic teams, and is offering affected people credit monitoring and identity protection while the investigation continues, a step that underscores wider risks to financial firms and their staff.