Insight Partners insightpartners.com Insight Partners data breach: what happened and what to do
Insight Partners, the venture capital firm, said an attacker used social engineering to get in around October 25, 2024 and took data, then encrypted servers on January 16, 2025. A state filing counts 12,657 people. Letters did not list which personal data was taken.
View all 13,115 breaches- Breach date
- 25 Oct 2024
- Affected
- 12,657
- Last updated
Insight Partners is a venture capital firm. In September 2025 it began notifying people that a ransomware attack had exposed their personal information.
What happened
The notices say an attacker used a social engineering attack to get into servers used by the HR and finance teams on or around October 25, 2024. The attacker took data and, at about 10:00 a.m. Eastern on January 16, 2025, began encrypting those servers. Insight detected the attack that day. Notification letters went out in September 2025, and the firm said anyone who hadn't received a letter by the end of that month was not affected.
What was exposed
The letters did not say which personal data was taken. An earlier company statement said the stolen data included information about certain funds, management companies and portfolio companies, banking and tax information, and personal information of current and former employees and of limited partners. A state filing reported by the press counts 12,657 people.
Banking and tax information can be used for fraud and for targeted phishing, including messages that look like they come from an investor relations or payroll contact.
The company's response
Insight offered complimentary credit or identity monitoring and warned recipients about possible identity theft attempts. No group has publicly claimed responsibility, and the firm hasn't said whether it received an extortion demand.
What to do if you were in it
- 1
Read your letter and take the monitoring offer
Enroll with the code in your notice before the deadline. It's free.
- 2
Freeze your credit at all three bureaus
Freezing your credit at Equifax, Experian and TransUnion stops anyone opening new accounts in your name. It's free and you can lift it when you need credit.
- 3
Watch bank and tax accounts
If banking or tax details may have been involved, review statements often and consider an IRS Identity Protection PIN.
- 4
Verify payment and wire requests by phone
Investor and finance contacts are natural impersonation targets. Confirm any change in payment details using a number you already have.
- 5
Expect phishing that mentions the breach
Treat unexpected calls, texts and emails that mention this incident as suspect. Don't click links or give details. Contact the company using a number from its own website.
Frequently asked
Was I affected by the Insight Partners data breach?
Insight said anyone whose data was affected received a letter by the end of September 2025.
How many people were affected?
A state filing reported by the press counts 12,657 people.
What was exposed?
The letters didn't list the data. The firm's earlier statement mentioned banking and tax information and personal information of employees and limited partners.
Is there a settlement?
None of our sources reports one.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
