Apollo Global Management confirmed it was among several financial institutions struck by a string of social-engineering attacks last month, saying attackers gained unauthorised access to some of its cloud platforms between 6–10 July. Apollo is the first victim to formally disclose that sensitive personal data under its care was compromised in the campaign; it determined on 12 August that names, dates of birth, contact information, addresses and Social Security numbers were exposed, and has found so far no evidence the data was posted online or used for identity theft. Google attributes the campaign to BlackFile, a threat group affiliated with The Com that recently split its extortion operations across four brands.