Insight Partners Confirms Data Breach Result of Ransomware Attack

Insight Partners has disclosed that the data breach revealed earlier this year was the result of a ransomware attack, with the breach affecting more than 12,000 individuals. The attack was detected on 16 January 2025, and attackers gained access to the systems around 25 October 2024, with encryption of files beginning on 16 January 2025.

The company previously stated in mid-February that sensitive data may have been stolen, and, in May, confirmed that personal, financial, and other information pertaining to employees and partners had been compromised. The notifications to impacted individuals have started, and the Maine Attorney General’s Office has received a copy of the notification, which notes the attempts at exfiltration and that attackers used sophisticated social engineering in October 2024.

No known ransomware group appears to have listed Insight Partners on its leak site, which could indicate that a ransom may not have been paid, according to the information released. SecurityWeek has reached out to Insight Partners for comment and will update if a response is received.