Key Takeaways
- • Coordinated AI-powered vishing attack wave targeted major Wall Street hedge funds including Citadel, Point72 Asset Management, Two Sigma Investments, and Millennium Management, with several private equity firms also hit in the same assault.
- • Two Sigma successfully blocked the attack with no data compromise, confirming security team response and zero impact to data or systems; Citadel and Point72 declined to comment on breach status.
- • Point72 notified investors of the attack and found no client information was stolen in initial review, though the firm stated it was still investigating the incident.
- • Hackers used AI voice cloning technology to execute "vishing" attacks—a form of voice-based social engineering designed to trick employees into surrendering credentials or granting system access.
- • FINRA has engaged with member firms on the breach attempt and activated its Financial Intelligence Fusion Center (launched March 2026) to facilitate fraud threat intelligence sharing and coordinated response among regulated investment managers.
Summary
A coordinated wave of AI-powered voice phishing attacks targeted multiple major hedge funds and private equity firms on Wall Street in early August 2026. According to Bloomberg reporting, the assault specifically affected Point72 Asset Management, Citadel, Two Sigma Investments, and Millennium Management, with attackers employing artificial intelligence voice cloning technology to execute what cybersecurity professionals term "vishing" attacks—phone-based social engineering schemes designed to extract sensitive employee credentials and system access.
Two Sigma, which manages $75 billion in assets, publicly confirmed it successfully defended against the attack. In a statement, a Two Sigma spokesperson reported: "Our security team responded quickly to an attempted vishing campaign targeting Two Sigma and other investment managers, and we have no indication of any impact to our data or our systems." The firm indicated it would continue close monitoring of the situation. Point72 informed investors that it had experienced the attack and completed an initial review finding no theft of client information, though the firm stated its investigation was ongoing. Citadel and Millennium Management declined to comment on the incident to Bloomberg.
Point72's disclosure to investors marked a notable transparency step regarding the breach attempt, distinguishing it from competitors who offered limited public comment. The vishing technology employed in the attack represents an escalation in AI-enabled social engineering, as attackers leveraged voice synthesis to impersonate trusted individuals and manipulate employees into compromising security protocols.
The Financial Industry Regulatory Authority (FINRA) has actively engaged member firms regarding the attempted breaches. The regulator is leveraging its newly established Financial Intelligence Fusion Center, launched in March 2026, as a secure portal designed to enable member firms to share fraud threat intelligence and coordinate defensive and investigative responses. This regulatory infrastructure development reflects growing institutional concern about large-scale, coordinated cyber threats targeting the financial services sector.
Two Sigma, which manages $75 billion in assets, publicly confirmed it successfully defended against the attack. In a statement, a Two Sigma spokesperson reported: "Our security team responded quickly to an attempted vishing campaign targeting Two Sigma and other investment managers, and we have no indication of any impact to our data or our systems." The firm indicated it would continue close monitoring of the situation. Point72 informed investors that it had experienced the attack and completed an initial review finding no theft of client information, though the firm stated its investigation was ongoing. Citadel and Millennium Management declined to comment on the incident to Bloomberg.
Point72's disclosure to investors marked a notable transparency step regarding the breach attempt, distinguishing it from competitors who offered limited public comment. The vishing technology employed in the attack represents an escalation in AI-enabled social engineering, as attackers leveraged voice synthesis to impersonate trusted individuals and manipulate employees into compromising security protocols.
The Financial Industry Regulatory Authority (FINRA) has actively engaged member firms regarding the attempted breaches. The regulator is leveraging its newly established Financial Intelligence Fusion Center, launched in March 2026, as a secure portal designed to enable member firms to share fraud threat intelligence and coordinate defensive and investigative responses. This regulatory infrastructure development reflects growing institutional concern about large-scale, coordinated cyber threats targeting the financial services sector.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.