Insight Partners, a mega venture capital firm with more than $90 billion in funds under management, fears network intruders got their hands on internal sensitive data about employees, portfolio companies, investors, and more. In February, the biz informed folks that some miscreants had performed a 'sophisticated social engineering attack' and gained access to Insight's servers. Insight said it detected the security breach on January 16, and third-party cyber-investigators were drafted in to determine what data, if any, had been accessed. This week, Insight issued an update.Based on our investigation to date, we understand that the impacted data may include certain fund, management company, and portfolio company information, banking and tax information, and certain personal information of our current and former employees, as well as information related to our limited partners, it said in a statement.
Source: https://www.theregister.com/2025/05/09/insight_partners_hack/
TPRM report: https://scoringcyber.rankiteo.com/company/insight--partners
"id": "ins220051225",
"linkid": "insight--partners",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Finance',
'name': 'Insight Partners',
'type': 'Venture Capital Firm'}],
'attack_vector': 'Sophisticated Social Engineering Attack',
'data_breach': {'type_of_data_compromised': ['Fund information',
'Management company information',
'Portfolio company information',
'Banking and tax information',
'Personal information of current '
'and former employees',
'Information related to limited '
'partners']},
'date_detected': '2023-01-16',
'description': 'Insight Partners, a venture capital firm with over $90 '
'billion in funds under management, experienced a data breach '
'involving sensitive data about employees, portfolio '
'companies, investors, and more. The breach was detected on '
'January 16, and third-party cyber-investigators were brought '
'in to determine the extent of the accessed data.',
'impact': {'data_compromised': ['Fund information',
'Management company information',
'Portfolio company information',
'Banking and tax information',
'Personal information of current and former '
'employees',
'Information related to limited partners']},
'references': [{'source': 'Insight Partners'}],
'response': {'third_party_assistance': 'Third-party cyber-investigators'},
'title': 'Insight Partners Data Breach',
'type': 'Data Breach'}