Key Takeaways
- • Point72 Asset Management, Citadel, Millennium Management, and Two Sigma Investments were targeted in a coordinated wave of AI-powered voice phishing attacks ("vishing") targeting major Wall Street hedge funds in early August 2026.
- • Point72 notified investors of the breach on Wednesday but reported that initial review found no client information was stolen; the firm stated it was continuing to review the incident.
- • Two Sigma Investments, which manages $75 billion in assets, successfully blocked the attempted attack with no indication of data or system compromise according to a company statement.
- • Vishing attacks use AI voice cloning technology to manipulate employees into surrendering credentials or granting system access; FINRA has been coordinating with member firms on the breach and leveraging its newly launched Financial Intelligence Fusion Center (established March 2026) to share threat intelligence.
- • Multiple private equity firms were also targeted as part of the same coordinated assault, expanding the scope of the attack beyond hedge fund managers.
Summary
A coordinated cyberattack wave targeting major Wall Street financial institutions leveraging artificial intelligence voice cloning technology struck at least four prominent hedge funds in early August 2026. Point72 Asset Management, Citadel, Millennium Management, and Two Sigma Investments were all targeted in the assault, which employed a sophisticated social engineering technique known as "vishing"—voice-based phishing that uses AI to clone or mimic voices in phone calls with the intent of extracting sensitive credentials or system access from employees.
Point72 Asset Management disclosed the attack to investors on Wednesday, stating that while the firm had been targeted, an initial review indicated no client information had been compromised. However, the firm noted it was continuing to conduct a thorough review of the incident. Spokespeople for Point72, Citadel, and Millennium Management declined to comment further to Bloomberg. Two Sigma Investments, managing $75 billion in assets, reported successfully defending against the attempted breach. "Our security team responded quickly to an attempted vishing campaign targeting Two Sigma and other investment managers, and we have no indication of any impact to our data or our systems," a Two Sigma spokesperson stated. "We continue to monitor the situation closely."
The scope of the coordinated assault extended beyond hedge fund managers to include several private equity firms, according to Bloomberg reporting. FINRA, the financial industry regulator, has been in contact with affected member firms regarding the attempted breaches and is coordinating response efforts. The regulator is leveraging its newly established Financial Intelligence Fusion Center, launched in March 2026, which serves as a secure portal enabling member firms to share fraud threat intelligence and coordinate defensive responses to emerging cyber threats. This infrastructure positions the industry to better detect and respond to coordinated attacks of this nature going forward.
Point72 Asset Management disclosed the attack to investors on Wednesday, stating that while the firm had been targeted, an initial review indicated no client information had been compromised. However, the firm noted it was continuing to conduct a thorough review of the incident. Spokespeople for Point72, Citadel, and Millennium Management declined to comment further to Bloomberg. Two Sigma Investments, managing $75 billion in assets, reported successfully defending against the attempted breach. "Our security team responded quickly to an attempted vishing campaign targeting Two Sigma and other investment managers, and we have no indication of any impact to our data or our systems," a Two Sigma spokesperson stated. "We continue to monitor the situation closely."
The scope of the coordinated assault extended beyond hedge fund managers to include several private equity firms, according to Bloomberg reporting. FINRA, the financial industry regulator, has been in contact with affected member firms regarding the attempted breaches and is coordinating response efforts. The regulator is leveraging its newly established Financial Intelligence Fusion Center, launched in March 2026, which serves as a secure portal enabling member firms to share fraud threat intelligence and coordinate defensive responses to emerging cyber threats. This infrastructure positions the industry to better detect and respond to coordinated attacks of this nature going forward.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.