Article Details

Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet. VC giant rebuilt boxes, patched holes, and says it’s beefed up security – but won’t say who did it. Venture capital giant Insight Partners has confirmed that a January ransomware attack compromised the personal data of more than 12,000 people, including employees, former staff, and the firm's usually-secretive limited partners. The disclosure came in a letter filed with Maine's Attorney General this week, marking the first time Insight has publicly acknowledged that the incident involved data-encrypting malware. It previously described the breach only as a "sophisticated social engineering attack." According to the filing, attackers gained access to servers used by the HR and finance teams on or around 25 October 2024. They quietly exfiltrated data before kicking off encryption at around on January 16, 2025 — the point at which Insight's IT team detected the intrusion and booted them out. The data breach notification letter doesn't say what data the hackers managed to grab. However, an earlier public statement from Insight said the stolen data included information about certain Insight funds, management companies, and portfolio companies, along with banking and tax records. Personal information relating to current and former employees and limited partners – the wealthy backers of Insight's venture funds – was also taken. Insight manages more than $90 billion in assets and backs a long list of tech and cybersecurity companies, including Twitter, Wiz, Hootsuite, SentinelOne, and Recorded Future. The VC giant says it has mailed notification letters to all affected individuals and is offering complimentary credit or identity monitoring services. The company says it has also "implemented necessary security measures to re-secure affected systems and to prevent similar occurrences in the future", which included rebuilding affected systems, patching the misconfiguration that let the miscreants in, and beefing up internal defenses to stop it from happening again. Which crew was behind the ransomware hit, what they demanded, or whether Insight coughed up any cash remains a mystery. Insight Partners did not respond to The Register's questions.