Breach on VC firm Insight Partners puts sensitive data at risk

Global venture capital firm Insight Partners has confirmed it suffered a data breach in January 2025, exposing sensitive information belonging to employees and investors. The company, known for backing major tech players such as Twitter, HelloFresh, and Veeam Software, disclosed the incident in a public statement on February 18, 2025.

 

According to Insight Partners, the data breach occurred on January 16, 2025, following a sophisticated social engineering attack.

 

An unauthorised actor gained access to certain internal IT systems, though the firm says the intrusion was contained within a single day and did not disrupt its business operations.

An ongoing investigation has confirmed that multiple categories of confidential data were compromised. Among the affected information are fund and portfolio company records, details related to the management company, banking and tax documents, as well as personal data of both current and former employees. Additionally, information connected to Insight’s Limited Partners was part of the stolen material.

The extent of the exposed information differs from person to person. Those affected will be notified in waves over the coming days, according to the company. In the meantime, Insight Partners has advised potentially impacted individuals to take precautionary steps. These include changing all personal and work-related passwords, enabling two-factor authentication on financial accounts, and closely monitoring financial statements and credit reports. People are also encouraged to place fraud alerts or credit freezes to prevent further risk.

Although the data breach has been confirmed, Insight Partners has not appeared on any known ransomware or extortion portals. As a result, the attackers’ identities and their motives remain unknown at this time.

Insight Partners is a leading name in the venture capital and private equity space, with a focus on high-growth technology, software, and internet businesses. The firm manages over $90 billion in regulatory assets and has invested in over 800 companies worldwide.

While the full scope of the data breach is still being determined, Insight’s swift containment of the threat and transparency about the situation have been noted. Still, the incident shows the escalating cybersecurity risks faced by financial and investment institutions globally.

As the investigation progresses, Insight Partners will provide updates and support to those affected, assuring stakeholders that data protection remains a top priority.