Venture capital firm Insight Partners says it has completed notifying a number of individuals, including the firm’s limited partners, whose personal information was stolen by hackers in a January data breach.
In a statement late last week, the company said it completed its review in August following the data breach, which it described as a “social engineering attack” without further explanation.
According to its earlier notice, the stolen data included information about certain Insight Partners’ funds, management companies, and portfolio companies. The hackers also took banking and tax information, the company said, as well as personal information about its current and former employees and its limited partners — the typically private and unnamed investors who help provide capital to Insight’s venture funds.
Insight Partners has so far kept details of the breach under wraps, including how many individuals had data stolen, or provided a copy of the notification it sent to those affected when asked by TechCrunch. The company has not said if it received an extortion demand from the hackers or if it paid the hackers. (It’s not uncommon for companies to face demands for payment in exchange for the hackers deleting or not publishing the stolen data.)
Kristen Zeck, a spokesperson for Insight Partners, did not respond to emails with questions about the breach.
The company has more than $90 billion in assets under its management and has invested in some of the largest cybersecurity companies today, including Databricks and Wiz.
Insight Partners joins a handful of other venture firms in recent years to have been hacked.
Silicon Valley venture firm Advanced Technology Ventures was hit by a ransomware attack in 2021, the same year that Sequoia Partners experienced a data breach. Both incidents allowed hackers to swipe personal information of their firms’ limited partners.
