Insight Partners admits personal and financial data breach from January cyberattack

Insight Partners, a prominent venture capital firm managing over $90 billion in assets, confirmed that a cyberattack in January led to the theft of sensitive personal and financial data. The company is preparing to notify affected individuals, including current and former employees, as well as limited partners — investors who typically remain anonymous. The compromised information includes banking and tax details, and also involves data related to the firm’s funds, portfolio companies, and management entities.

This is the first public acknowledgment by Insight that data was actually exfiltrated during the attack. Although the firm claims the breach was the result of a ‘sophisticated social engineering’ incident, it has yet to provide technical evidence or further clarification about the attack’s nature. A spokesperson declined to comment further.

The breach places Insight among a growing list of venture firms targeted by cybercriminals in recent years. A similar incident occurred in 2021 when Advanced Technology Ventures experienced a ransomware attack affecting its limited partners. Given Insight’s investments in leading cybersecurity companies like Wiz and Armis, the incident raises questions about internal security practices even among cybersecurity-focused investors.