Voice-phishing campaign targets hedge funds, private equity

A coordinated wave of cyberattacks targeted several of Wall Street's most prominent hedge funds and private equity firms in early August 2026, employing sophisticated voice phishing tactics to attempt to breach their information systems. The attacks, which security analysts have attributed to a known extortion group, underscore the escalating threat of artificial intelligence-enhanced social engineering against the financial sector.

The campaign, which unfolded in recent days, specifically targeted Point72 Asset Management, Millennium Management, Two Sigma Investments, and Citadel, among other firms. Point72 informed investors on August 5 that it had been targeted, stating its initial review found no evidence that client information was stolen. Two Sigma confirmed its security team quickly responded to an attempted "vishing" campaign and said it had no indication of any impact to its data or systems. Spokespeople for Millennium and Citadel declined to comment.

The attackers relied on voice phishing, or vishing, a technique where criminals impersonate trusted individuals, such as IT support staff, in phone calls to trick employees into revealing login credentials or granting...