Citadel, Point72 Asset Management and Millennium Management: Point72, Citadel among hedge funds hit by AI vishing attacks

AI Voice Cloning Targets Major Wall Street Firms in Coordinated Vishing Attacks

Hackers leveraged AI-powered voice cloning in a recent wave of cyberattacks targeting prominent Wall Street asset managers, including Point72 Asset Management, Millennium Management, Two Sigma Investments, and Citadel. The incidents, reported by Bloomberg, involved vishing a form of voice phishing where attackers mimic trusted voices to deceive employees into divulging sensitive information or granting system access.

Point72 confirmed the attack to investors but stated its initial review found no evidence of stolen client data, though the investigation remains ongoing. Two Sigma, which manages $75 billion in assets, successfully thwarted the attempt, with a spokesperson confirming no impact on its systems or data. Millennium and Citadel declined to comment.

The attacks extended beyond hedge funds, with several private equity firms also targeted. The Financial Industry Regulatory Authority (FINRA) has engaged with affected firms, leveraging its Financial Intelligence Fusion Center launched in March 2026 to facilitate threat intelligence sharing and response coordination.

Cybersecurity experts warn that AI has drastically lowered the cost and complexity of large-scale attacks, enabling threat actors to impersonate voices with alarming accuracy. Vinod Paul of Align Managed Services noted that AI allows hackers to scale attacks from dozens to thousands of targets, while Will Wilson of Antithesis emphasized that AI has "commoditized" sophisticated cyber threats, forcing firms to bolster defenses or risk severe breaches.

The incidents underscore the growing sophistication of social engineering attacks in the financial sector, where AI-driven impersonation poses an escalating challenge.

Source: https://www.investmentnews.com/fintech/point72-citadel-among-hedge-funds-hit-by-ai-vishing-attacks/267708

Point72 cybersecurity rating report: https://www.rankiteo.com/company/point72-asset-management-l-p-

Citadel cybersecurity rating report: https://www.rankiteo.com/company/citadel-llc

Millennium Management-LLC cybersecurity rating report: https://www.rankiteo.com/company/millennium-management-llc

"id": "POICITMIL1785968786",
"linkid": "point72-asset-management-l-p-, citadel-llc, millennium-management-llc",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Financial Services',
                        'location': 'Wall Street, USA',
                        'name': 'Point72 Asset Management',
                        'type': 'Asset Management (Hedge Fund)'},
                       {'industry': 'Financial Services',
                        'location': 'Wall Street, USA',
                        'name': 'Millennium Management',
                        'type': 'Asset Management (Hedge Fund)'},
                       {'industry': 'Financial Services',
                        'location': 'Wall Street, USA',
                        'name': 'Two Sigma Investments',
                        'size': 'Manages $75 billion in assets',
                        'type': 'Asset Management (Hedge Fund)'},
                       {'industry': 'Financial Services',
                        'location': 'Wall Street, USA',
                        'name': 'Citadel',
                        'type': 'Asset Management (Hedge Fund)'},
                       {'industry': 'Financial Services',
                        'location': 'Wall Street, USA',
                        'type': 'Private Equity Firms'}],
 'attack_vector': 'AI-powered voice cloning, social engineering',
 'description': 'Hackers leveraged AI-powered voice cloning in a recent wave '
                'of cyberattacks targeting prominent Wall Street asset '
                'managers, including Point72 Asset Management, Millennium '
                'Management, Two Sigma Investments, and Citadel. The incidents '
                'involved vishing, a form of voice phishing where attackers '
                'mimic trusted voices to deceive employees into divulging '
                'sensitive information or granting system access.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage'},
 'investigation_status': 'Ongoing (Point72), Thwarted (Two Sigma)',
 'lessons_learned': 'AI has drastically lowered the cost and complexity of '
                    'large-scale attacks, enabling threat actors to '
                    'impersonate voices with alarming accuracy. AI-driven '
                    'impersonation poses an escalating challenge in the '
                    'financial sector.',
 'post_incident_analysis': {'root_causes': 'AI-powered voice cloning, lack of '
                                           'robust voice authentication'},
 'recommendations': 'Firms should bolster defenses against AI-driven social '
                    'engineering attacks, including enhanced voice '
                    'authentication and employee training.',
 'references': [{'source': 'Bloomberg'}],
 'regulatory_compliance': {'regulatory_notifications': 'FINRA engaged with '
                                                       'affected firms'},
 'title': 'AI Voice Cloning Targets Major Wall Street Firms in Coordinated '
          'Vishing Attacks',
 'type': 'Vishing (Voice Phishing)',
 'vulnerability_exploited': 'Human trust in voice authentication'}