Apollo Breach Adds to Wave of Wall Street Cyberattacks

Apollo Confirms Wall Street Breach

Apollo Global Management has confirmed that hackers stole sensitive personal data belonging to individuals connected to the private equity giant, marking the latest blow to Wall Street's cybersecurity defenses. An internal investigation determined that names, home addresses and Social Security numbers were exfiltrated during a cyberattack last month, and the New York-based firm disclosed the incident in a letter sent to affected individuals 1. Reuters reported that Apollo was one of dozens of prominent U.S. financial institutions targeted in a broader campaign against the sector, suggesting the firm was not an isolated victim but part of a coordinated wave of attacks sweeping through finance 34.

A Pattern Across Sectors

The Apollo incident lands amid a string of similarly severe breaches spanning banking and healthcare, underscoring how attackers are systematically targeting organizations that hold vast troves of sensitive personal and financial data. In one case, GlobalBank disclosed a sweeping breach discovered in mid-August that exposed Social Security numbers, credit card details and even investment portfolio information for millions of customers, an incident described as a wake-up call about the fragility of even well-resourced financial institutions 2.

Healthcare organizations have proven equally vulnerable. CareCloud confirmed that a cyberattack exposed the medical records and personal information of roughly 3.7 to 3.8 million patients, a breach ranked among the largest in the U.S. healthcare industry this year and reported as the fifth-largest health data theft of 2026 57. Separately, South Carolina-based health system AnMed confirmed that hackers accessed patient personal information during a cyberattack last month, prompting a public apology from its CEO 6. Though the sectors differ, the underlying story is consistent: attackers are successfully breaching organizations entrusted with highly sensitive identity, financial and medical data, and disclosures are frequently arriving weeks after the actual intrusion.

Why It Matters

For Apollo, the exposure of Social Security numbers and home addresses raises the risk of identity theft and targeted fraud against clients, employees or investors whose data was compromised, even though the firm has not disclosed the full scope of how many people were affected 134. The fact that Apollo was named alongside dozens of other financial firms hit in the same period points to either a shared vulnerability, a common vendor, or a broad-based hacking campaign specifically aimed at Wall Street's data-rich institutions 34.

Taken together, these incidents illustrate a troubling trend: breaches are growing larger, spanning multiple industries, and increasingly involve the most sensitive categories of personal data — financial identifiers, health records and government-issued numbers. As lessons from the GlobalBank episode emphasize, consumers and institutions alike are being urged to tighten monitoring of accounts, freeze credit where necessary, and demand faster, more transparent breach disclosures from the companies safeguarding their data 2. With Apollo's investigation still unfolding, further details about the scale and method of the attack are likely to emerge in the coming weeks.