Apollo

Profile narrative

Apollo is a private equity firm headquartered in the United States of America. It employs roughly five thousand staff members and manages approximately nine hundred thirty‑eight billion dollars in assets. The firm focuses on investing in and managing portfolio companies across various sectors, providing capital and strategic support to businesses seeking growth or restructuring. Its activities span North America, Europe, and Asia, reflecting a global investment footprint. As a major player in the private equity industry, Apollo competes with other large alternative asset managers for deals and limited partner commitments.

In July 2026 Apollo disclosed a data breach that resulted from a social engineering attack where employees were tricked into revealing credentials via spoofed helpdesk calls. The intrusion allowed hackers to access cloud systems and exfiltrate personal data including names, birth dates, addresses, and Social Security numbers affecting employees and possibly individuals associated with portfolio companies. The breach was reported to the California attorney general and is part of a broader campaign involving threat actors using aliases such as Falcon, Helix, Pink, and Redact that target financial and private equity firms. Some ransom demands in this campaign have reached up to seven hundred fifty thousand dollars, though it remains unclear whether Apollo paid any ransom or whether other firms suffered similar compromises.

A separate entity also using the alias Apollo, identified as a sales engagement startup, experienced a data breach in October 2018 that compromised a database of over two hundred million publicly sourced business contact records. The exposed information included names, email addresses, company affiliations, job titles, phone numbers, and social media handles, with some unspecified client‑imported data also present but no financial information or credentials. The breach was discovered weeks after unauthorized access occurred during system upgrades and highlighted risks of large‑scale data repositories, such as increased potential for targeted phishing campaigns. The startup notified customers of the incident but withheld detailed information about the full impact scope and any regulatory notifications that may have been required.

While the two Apollo organizations share the same alias, they operate in distinct markets—one in private equity investment and the other in sales engagement technology—and therefore have different regulatory environments, business models, and risk profiles. Both are headquartered in the United States, as indicated by the organization context provided. No further details about ownership, parent‑subsidiary relationships, or additional structural attributes are available in the supplied sources.

Incidents

2 incidents linked to this organisation.