Insight Partners confirms breach and warns of heightened BEC attack risks.
One of the world’s largest venture capital firms, Insight Partners, which manages over $90 billion in assets, has confirmed a data breach following a successful cyberattack on its servers. Hackers may have accessed sensitive information on employees, investors, portfolio companies, and fund operations.
The breach was initially discovered on January 16, and in February, Insight disclosed that the breach stemmed from a sophisticated social engineering attack. The company brought in external cybersecurity experts, who are still investigating the full scope of the breach. This week, Insight released a new statement confirming that compromised data may include banking and tax information, details on investment funds and portfolio companies, and personal data of current and former employees and limited partners — high-net-worth individuals who supply capital to the fund.
Insight has not disclosed whether the data was merely viewed or also exfiltrated. It has already notified key stakeholders and is gradually informing others. Affected individuals are advised to change their passwords, enable two-factor authentication, and freeze their credit if necessary.
Insight Partners is known for backing high-profile companies like Twitter, Wiz, Hootsuite, SentinelOne, and Recorded Future. Confidential data on such investments is extremely valuable to competitors and can be exploited in business email compromise (BEC) schemes. According to the FBI, global losses from BEC attacks now exceed $55 billion. These scams often begin by harvesting corporate emails or phone numbers and then impersonating executives to trick employees into wiring funds to attacker-controlled accounts. The more detailed the internal information hackers have, the more convincing the fraud.
The threat is compounded by the rise of deepfakes. Last year, the U.S. Federal Communications Commission warned about increasing use of fake audio recordings. In one high-profile case in Hong Kong, scammers convinced a CFO to transfer $25 million using a deepfaked video of the CEO. The cost of such tech is dropping — while its effectiveness is rapidly rising.
