Insight Partners Confirms Data Breach Exposing Users’ Personal Data

Insight Partners has officially confirmed a significant data breach that exposed personal information tied to the company, following a months-long intrusion. The threat actor gained unauthorized access on or around 25 October 2024 through a sophisticated social engineering attack and remained undetected for about 83 days until 16 January 2025, when IT staff discovered the incident as servers were being encrypted.

During the intrusion, data was exfiltrated from HR and finance systems before ransomware was deployed to encrypt compromised machines. The breach notification notes that personal information was involved, though the exact types of data and the total number of affected individuals have not been disclosed, and the company says there is no evidence of misuse to date.

In response, Insight Partners has notified law enforcement and regulatory authorities, worked with third‑party investigators, rebuilt affected systems, and strengthened security and access controls. Affected individuals are being offered complimentary identity theft protection through Equifax WebDefend membership and a dedicated call centre has been established for inquiries. The incident underscores the persistent risk of sophisticated social engineering and the need for robust security monitoring and rapid incident response.