Social EngineeringFinancial ServicesFinanceVishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

APOLLO MANAGEMENT HOLDINGS, L.P.

bd_305d1a0348a04e04 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 6, 2026

Filed

Aug 20, 2026

To disclose

6 weeks

Affected

3state residents only

Linked

4 filings

Confidence

69%

Full breach record for APOLLO MANAGEMENT HOLDINGS, L.P. →

Apollo Management Holdings, L.P. experienced a social engineering incident involving vishing (phone calls) from July 6-10, 2026. An unknown third party appropriated user credentials and MFA from employees, gaining unauthorized access to cloud platforms. The incident affected at least 3 New Hampshire residents, exposing name, DOB, contact info, address, and SSN/TIN/Passport. The incident was contained by July 10, 2026. Credit monitoring is being offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 45 days

Jul 6, 2026

Begins

Jul 6, 2026

Discovered

Aug 20, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_1042afc11108c2ec2026-08-20Candidate
Vermont State AGbd_a65ba2ec99baf7d62026-08-21 · +1dVerified
Massachusetts State AGbd_f90556a8b711db042026-08-01 · +19dCandidate

Name: APOLLO MANAGEMENT HOLDINGS, L.P.
norm: apollo management

Name: APOLLO MANAGEMENT HOLDINGS, L.P.
norm: apollo management
Industry: Financial Servicesllm

Discovered: Jul 6, 2026
Breach occurred: Jul 6, 2026 – Jul 10, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 21, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney GeneralContacted US federal law enforcement authorities
Initial access: phishing_link

During the incident: Initiated its incident response processes
Investigating with support of outside legal counsel and forensics resources
Contacted US federal law enforcement authorities
Disabling affected accounts
Revoking active sessions across key applications
Performing an enterprise-wide password reset
Confirming that no unauthorized multifactor authentication (MFA) methods were enrolled
Issued multiple communications from executive leadership through email, SMS, phone, and the intranet
Changes made: Offering twenty-four months of credit monitoring and identity protection services at no cost
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGAug 1 · first

California State AG+19d

New Hampshire State AG+19d · this page

Vermont State AG+20d

Pattern: first filing Aug 1 (MA), last Aug 21 (VT) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/apollo-management-holdings-20260820.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2026
Raw hash: 2fb5558948620df9679f7ae9f0bf418725cbf348540689005d01a17b352553ad

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAPOLLO MANAGEMENT HOLDINGS, L.P.

Victim entityAPOLLO MANAGEMENT HOLDINGS, L.P.

Incidentdiscovered Jul 6, 2026

Stated responseInitiated its incident response processes

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov