EXCLUSIVE: Hackers targeted US private equity, other firms including Blackstone, CME, data shows

Recent reporting outlines a targeted hacking campaign directed at United States private equity firms and financial institutions, according to coverage from outlets including Reuters, Yahoo Finance, TechCrunch, and eFinancialCareers. The activity involves hackers targeting prominent entities such as Blackstone and CME based on available data. Specific mechanics of the operation include threat actors placing voice calls to employees working within financial firms. According to findings from Google, these callers are attempting to compromise targets in order to execute hacks and extort the victims involved, blurring the lines between traditional social engineering and corporate infiltration. Media coverage emphasizes the distinct nature of this campaign, particularly the direct phone contact approach highlighted by TechCrunch and eFinancialCareers.

Outlets such as Reuters and Yahoo Finance broke the exclusive data showing how specific financial giants like Blackstone and CME were targeted. The inclusion of eFinancialCareers contextualizes the threat for individual workers in the sector, noting scenarios where a hedge fund boss might call to offer a job, raising severe concerns about identity spoofing and fraudulent communications directed at professionals within the hedge fund and private equity industries. This emerging trend builds upon ongoing cybersecurity vulnerabilities within the financial sector, where high-value targets make lucrative objectives for extortion schemes. While public reports establish that Google is tracking these tactics, the broader context involves sophisticated threat actors shifting toward voice-based social engineering against employees at critical financial infrastructure institutions. The convergence of targeted data attacks and direct phone calls represents an escalation in methods used to compromise corporate networks and personnel across the private equity landscape.

Future updates will depend on further disclosures from affected institutions and technology companies tracking the intrusions. Coverage does not yet specify the full extent of the data compromised during these targeting operations or whether ransom demands were successfully met by any of the named firms. Observers will need to monitor statements from Google, affected entities like Blackstone and CME, and investigative reports from Reuters and TechCrunch to track how financial firms respond to these telephone-based extortion attempts.