**New York-based investment giant notifies over 12,000 individuals of data breach affecting sensitive financial and personal information**
Insight Partners, a prominent venture capital and private equity firm managing over $90 billion in assets, has fallen victim to a sophisticated ransomware attack that compromised sensitive data belonging to thousands of individuals.
## The Attack Timeline
The cybersecurity incident began in October 2024 when threat actors successfully executed a sophisticated social engineering attack to infiltrate Insight Partners’ network. According to breach notifications filed with state attorneys general, the attackers spent months inside the company’s systems before striking.
On January 16, 2025, at approximately 10:00 a.m. EST, the cybercriminals began encrypting the company’s servers after completing their data theft operation. This multi-month approach allowed the attackers to thoroughly explore the network and extract valuable information before revealing their presence.
## Scope of the Data Breach
The attack has impacted 12,657 individuals, according to filings with Maine’s attorney general. The stolen information includes:
– Banking and tax records
– Personal information of current and former employees
– Limited partner details
– Fund and management company data
– Portfolio company information
## Company Response and Victim Notification
Insight Partners first disclosed the cybersecurity incident in February 2025, initially describing it as a network breach. Two months later, the company confirmed that sensitive data had been stolen during the attack.
The firm is now mailing formal notification letters to all affected individuals, which include offers for complimentary credit and identity monitoring services. The company has stated that anyone who doesn’t receive a notification letter by the end of September 2025 was not impacted by the breach.
## About Insight Partners
Insight Partners is a major player in the venture capital world, with a 30-year history of investing in over 800 software and technology startups globally. The firm’s significant assets under management and extensive portfolio make this breach particularly concerning for the broader tech investment ecosystem.
## Ongoing Investigation
While no ransomware groups have publicly claimed responsibility for the attack, the incident highlights the growing threat sophisticated social engineering poses to financial institutions and investment firms. The company has not responded to requests for additional comment about the incident.
This breach serves as another reminder that even well-resourced financial institutions remain vulnerable to determined cybercriminals who combine social engineering tactics with advanced technical capabilities.