Key Takeaways
- • Major hedge funds including Two Sigma, Citadel, Point72 Asset Management, and Millennium Management were targeted in a coordinated wave of AI-powered voice phishing attacks (vishing) designed to compromise sensitive credentials and systems.
- • Two Sigma Investments, which manages $75 billion in assets, successfully thwarted the attempted breach and reported the attack to Bloomberg, confirming the sophistication and scope of the offensive.
- • Attackers employed AI voice cloning technology to impersonate legitimate contacts, marking an escalation in social engineering tactics targeting institutional financial firms.
- • The attacks represent a systemic threat to hedge fund operations and cybersecurity infrastructure, with multiple tier-one asset managers across different strategies simultaneously targeted.
Summary
A coordinated wave of sophisticated cyberattacks employing artificial intelligence-powered voice phishing has targeted some of the world's largest hedge funds, according to reporting from Bloomberg News on August 5, 2026. The offensive affected multiple premier institutions including Two Sigma Investments, Citadel, Point72 Asset Management, and Millennium Management, among others.
Two Sigma Investments, a New York-based hedge fund managing $75 billion in assets and known for technology-driven trading methodologies, disclosed that it successfully thwarted the attempted breach. The firm confirmed to Bloomberg that the attackers sought to gain unauthorized access to sensitive data and credentials through the phishing campaign.
The attacks employed AI voice cloning technology to execute the vishing scheme, with hackers mimicking legitimate personnel to manipulate targets into disclosing confidential information or system access credentials. This represents a significant evolution in social engineering tactics, combining voice synthesis with the psychological manipulation inherent in phishing operations. The targeting of multiple major hedge funds simultaneously suggests a coordinated, large-scale offensive rather than isolated attempts.
The incident underscores growing cybersecurity vulnerabilities within the institutional investment community, particularly among firms managing substantial assets under management. While Two Sigma and other targeted firms were able to identify and thwart the specific attempts reported, the breadth of the offensive—striking across multiple strategies and geographies—indicates that threat actors possess sophisticated capabilities and detailed knowledge of target organizations' operational structures.
Two Sigma Investments, a New York-based hedge fund managing $75 billion in assets and known for technology-driven trading methodologies, disclosed that it successfully thwarted the attempted breach. The firm confirmed to Bloomberg that the attackers sought to gain unauthorized access to sensitive data and credentials through the phishing campaign.
The attacks employed AI voice cloning technology to execute the vishing scheme, with hackers mimicking legitimate personnel to manipulate targets into disclosing confidential information or system access credentials. This represents a significant evolution in social engineering tactics, combining voice synthesis with the psychological manipulation inherent in phishing operations. The targeting of multiple major hedge funds simultaneously suggests a coordinated, large-scale offensive rather than isolated attempts.
The incident underscores growing cybersecurity vulnerabilities within the institutional investment community, particularly among firms managing substantial assets under management. While Two Sigma and other targeted firms were able to identify and thwart the specific attempts reported, the breadth of the offensive—striking across multiple strategies and geographies—indicates that threat actors possess sophisticated capabilities and detailed knowledge of target organizations' operational structures.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.