Insight Partners breach exposes staff and partner data

Venture capital firm Insight Partners said a social engineering attack it suffered earlier this year compromised confidential data of its employees and partners.

 

Headquartered in New York, Insight Partners is a global venture capital and private equity firm that invests in high-growth technology, software, and internet companies. With offices in London, Tel Aviv, and the Bay Area, the company has several prominent clients including healthcare technology provider Inovalon, workforce management company Vector Solutions, and more.

 

In a data security incident notice published on its website, Insight Partners said that on January 16, it detected unauthorised access to its internal network where a third-party gained access to certain Insight information systems through a sophisticated social engineering attack.

 

The company launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident. It also took steps to contain and remediate the incident and notified relevant law enforcement authorities about the same.

 

In a recent update, Insight Partners said that its investigation revealed the sensitive personal information of its current and former employees and Limited Partners was compromised during the incident.

 

“Based on our investigation to date, we understand that the impacted data may include certain fund, management company, and portfolio company information, banking and tax information, and certain personal information of our current and former employees, as well as information related to our Limited Partners,” Insight Partners said.

 

The company added that it will start notifying affected entities “on a rolling basis beginning in the next few days.”

 

Insight Partners has advised all affected individuals to remain vigilant, change their personal and enterprise passwords at the earliest and activate two-factor authentication on all financial accounts.

 

At the time of publishing, no known hacker group claimed responsibility for the cyber attack on Insight Partners. The company also did not share details on who was behind the attack, how much data was compromised, or whether it has received a ransom demand