Apollo Global Management data breach (2026): what Apollo disclosed
In August 2026 Apollo Global Management notified regulators of a social-engineering incident that led to access to some of its cloud platforms.
Short answer
Was Apollo Global Management hacked?
Yes. Apollo’s notice to the California Attorney General describes a “social engineering incident” that led to unauthorized access to “certain cloud platforms” between 6 and 10 July 2026; exposed data may include names, dates of birth, contact details, home addresses and Social Security numbers.
Apollo says no client funds were affected and has not said how many people were involved.
Timeline at a glance
6–10 Jul 2026Unauthorized access to certain cloud platforms after social engineering. (Cybernews)Confirmed
Last updated October 31, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
Apollo Global Management’s security posture at the time
What Apollo Global Management publicly said about its security certifications and controls, how big it is, and how its shares moved, each tied to a source. A certificate covers a stated scope at a point in time; it is not a guarantee about every system. Reviewed 31 October 2026. Compare all 2026 breaches.
Security certifications publicly held
No public certification found.
No public certification found on the company’s own security, trust or compliance pages, in filings, or in the certificate registries searched (BSI, CSA STAR). That is a data point, not proof that none exists.
Size
Consolidated FY2025 revenue not verified for this page (see the FY2025 10-K)
Listing: NYSE: APO
Share price around the disclosure
No reliable report of a share-price move around the disclosure was found.
Apollo Global Management incident timeline, in detail
Confirmed = acknowledged by Apollo Global Management, a regulator filing or a court. Reported = credible reporting Apollo Global Management has not fully confirmed. Unverified claim = an attacker or leak-site claim.
Aug 2026 (access 6–10 Jul)ConfirmedIdentity / cloud
Social engineering leads to access to cloud platforms
What happened. Apollo’s notice to the California Attorney General describes a “social engineering incident” that led to unauthorized access to “certain cloud platforms” between 6 and 10 July 2026; exposed data may include names, dates of birth, contact details, home addresses and Social Security numbers. Apollo says no client funds were affected.
Impact. Social Security numbers may have been exposed; no client funds affected, per Apollo. People or records affected: Not disclosed.
We found no SOC 2 or ISO 27001 certification published by Apollo Global Management. That does not prove it had none; it means none was public.
The way in was a person, not a server
Like most of 2026’s large data thefts, this one is described as starting with social engineering: a phished or voice-phished login, often to single sign-on, then bulk export from a SaaS application. Certification audits test that identity controls exist and operate; they do not promise that no employee or contractor will ever be talked out of a login.
What it means for Apollo Global Management Apollo investors, employees and portfolio contacts — and what to do
What Apollo Global Management’s customers, partners and security teams can do now, based only on what has been disclosed.
1.Assume phishing follows the breach
Exposed contact details are used for convincing follow-up phishing. Warn staff and customers that genuine notices will not ask for passwords or payment.
2.Check your own help-desk and SSO flows
Require callback verification and phishing-resistant MFA for account and MFA resets; voice requests alone should never reset a login.
3.Ask the vendor what was exported, in writing
Ask which applications and fields were reached, the date range, and whether your organisation’s records were included.
Yes. Apollo’s notice to the California Attorney General describes a “social engineering incident” that led to unauthorized access to “certain cloud platforms” between 6 and 10 July 2026; exposed data may include names, dates of birth, contact details, home addresses and Social Security numbers.
Did Apollo Global Management have SOC 2 or ISO 27001 certification?+
We found no SOC 2 or ISO 27001 certification published by Apollo Global Management. That does not prove it had none; it means none was public.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by Apollo Global Management. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.
🎉 New here? Use code WELCOME10 for 10% off any plan at checkout