Insight Partners Discloses Data Breach Affecting Employees and Investors

In a significant cybersecurity incident, Insight Partners, one of the world’s largest venture capital firms with over $90 billion in assets under management, disclosed a data breach resulting from a cyberattack that occurred in January 2025. The firm confirmed that personal information belonging to current and former employees, limited partners, and portfolio companies was stolen during this attack.

Insight Partners plans to notify affected individuals on a rolling basis starting in the days following the announcement. The stolen data reportedly includes sensitive personal details, as well as banking and tax information related to certain funds, management companies, and portfolio companies. This breach is particularly impactful given the confidential nature of limited partners, whose identities are typically kept private.

While Insight Partners initially attributed the breach to a "sophisticated" social engineering attack, the firm has yet to provide detailed evidence or clarify the exact nature of the cyberattack. This incident marks the first public acknowledgment of data exfiltration by the firm following the January event.

Insight Partners is a notable investor in cybersecurity companies such as Wiz and Armis, highlighting the irony and severity of the breach. This event also reflects a growing trend of cyberattacks targeting venture capital firms, which manage sensitive financial and personal data of investors and portfolio companies. For instance, in 2021, Advanced Technology Ventures suffered a ransomware attack compromising limited partner data.

The breach at Insight Partners underscores the critical need for robust cybersecurity measures within the venture capital industry. Protecting sensitive investor and portfolio data is paramount to maintaining trust and operational integrity. Firms must proactively adopt advanced security protocols, employee training, and incident response strategies to mitigate risks posed by increasingly sophisticated cyber threats.

As cyberattacks evolve, venture capital firms and their stakeholders should prioritize transparency and swift communication when breaches occur. Insight Partners’ commitment to notifying affected parties is a positive step, but the incident serves as a cautionary tale for the entire investment community.