Almeida Law Group is investigating a data breach at Apollo Management Holdings, L.P. The breach occurred on July 6th, 2026. If you were affected, contact Almeida Law Group.
About Apollo Management Holdings, L.P.
Apollo Management Holdings, L.P. is part of Apollo Global Management, Inc. (NYSE: APO), a global alternative asset manager and retirement services provider founded in 1990 and headquartered in New York, NY. The firm operates through three segments — Asset Management, Retirement Services, and Principal Investing — serving institutional investors, wealth professionals, and individuals. Because the breached data included Social Security Numbers and other personal identifiers, the exposure carries a meaningful risk of identity theft and financial fraud for affected individuals.
What Happened?
Apollo Management Holdings, L.P. was listed in a California Attorney General sample breach notice (record ID: sb24-628551). According to that filing and Apollo’s own notice, the firm experienced a social engineering incident in which attackers gained unauthorized access to certain cloud platforms between July 6th, 2026 and July 10th, 2026. Apollo determined on August 12th, 2026 which data types were potentially affected, and filed notice with the California Attorney General on August 20th, 2026. Apollo states it notified law enforcement, engaged outside cybersecurity and forensic experts, and enhanced its security protocols. The firm reports no evidence that affected information has been publicly posted or used for identity theft or fraud at this time. Apollo’s breach notice was signed by its Global Head of Human Capital and was sent through Cyberscout, a TransUnion company handling breach response.
This incident is consistent with a broader vishing campaign targeting major private equity and financial firms that was reported by Reuters and Google’s Threat Intelligence Group in early August 2026. According to that reporting, more than 200 companies were targeted, including Blackstone, KKR, Bain Capital, TPG, Clearlake Capital, Bridgewater Associates, CME Group, and Moody’s. Google attributed the attacks to threat actors operating under multiple names, including Redact, Pink, Falcon, and Helix. The method involved phone-based impersonation of internal IT staff, directing employees to fake login pages to harvest credentials and multi-factor authentication codes — a technique known as adversary-in-the-middle credential harvesting — followed by automated exfiltration from cloud and SaaS environments. Apollo’s confirmed breach window of July 6th through July 10th, 2026 aligns with this campaign. No ransomware group has claimed responsibility for the Apollo-specific incident.
Key Facts at a Glance
- Company or Organization: Apollo Management Holdings, L.P. (part of Apollo Global Management, Inc.)
- Industry: Financial Services — Alternative Asset Management and Retirement Services
- Location: New York, NY (breach notices sent c/o Cyberscout, Suwanee, GA)
- Incident type: Social engineering / vishing; unauthorized access to cloud platforms
- Date of breach: July 6th, 2026
- Date breach discovered: August 12th, 2026
- Date of consumer notification: August 21st, 2026
- Identity theft protection offered: 24 months of credit monitoring and identity protection services through Cyberscout (a TransUnion company)
- Enrollment deadline: 90 days from August 21st, 2026
- Prior breach: None confirmed for Apollo Global Management
- Litigation status: No litigation connected to this breach as of August 20th, 2026
- Source: California Attorney General sample breach notice; Benzinga reporting on broader vishing campaign; Private Equity Wire
What Should You Do?
If you received a notice from Apollo Management Holdings, L.P., enroll in the 24 months of complimentary credit monitoring and identity protection offered through Cyberscout at https://bfs.cyberscout.com/activate using the unique code provided in your notice. You have 90 days from August 21st, 2026 to enroll, so act promptly. Because your Social Security Number may have been exposed, consider placing a fraud alert or a credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — at no cost to you. A credit freeze is one of the strongest protections available against new-account fraud. You can request your free annual credit reports at AnnualCreditReport.com and review them for any accounts or inquiries you do not recognize. If you believe your identity has already been misused, visit IdentityTheft.gov to report it and get a personalized recovery plan. Staying vigilant about account statements and monitoring your credit regularly are important ongoing steps.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
