Apollo Data Breach Shows the Risk Behind a Simple Phone Call

Apollo Global Management disclosed a July 6–10, 2026 breach in which attackers used social engineering (phone calls and fake login pages) to access parts of its cloud environment and may have stolen sensitive personal information—names, DOBs, contact details, home addresses, and Social Security numbers. The incident is linked to a wider campaign targeting financial firms with over 200 organizations reportedly affected; Apollo’s investigation is ongoing, details about the number of victims and exact cloud platforms remain unknown, and the report highlights failures in identity and access-control processes rather than a software flaw.