Archive — US — techcrunch
VC firm Insight Partners says thousands of staff and limited partners hadpersonal data stolen in a ransomware attack
Insight Partners, a major VC firm, reported a ransomware attack that compromised the personal data of over 12,600 individuals, including limited partners. The breach, stemming from a 'social engineering attack,' was discovered in August after hackers infiltrated its HR system and began data encryption in January 2025. The stolen data includes sensitive banking and personal information.
Key points
- Insight Partners notified thousands of individuals about a data breach via formal notification to California's attorney general.
- The attack was categorized as a 'social engineering attack' initiated in mid-October 2024.
- Hackers exfiltrated data and encrypted the company's systems on January 16, 2025, indicating a ransomware attack.
- Over 12,600 people were affected, including current and former employees and limited partners of Insight.
- Specific details on the stolen data have not been released, but it included banking and tax information.
- The company did not publicly disclose whether a ransom was demanded or paid.
Why it matters
- The incident highlights an ongoing trend of increasing ransomware attacks targeting financial firms and service companies.
- Historically, IC firms like Sequoia Partners and Advanced Technology Ventures also faced similar attacks, underscoring vulnerability in the venture capital sector.
- The incident reflects the broader 2025 IT trend of heightened cybersecurity risks as companies deploy more digital tools and platforms.
The ransomware attack on Insight Partners serves as a stark reminder of the vulnerabilities within the financial sector, emphasizing the need for robust cybersecurity measures as threats evolve in complexity and frequency.