Hacking Wave Hits Major Wall Street Hedge Funds
Alina Collins
Organized voice-phishing attacks targeted Two Sigma, Citadel, and Point72 among other top hedge funds; AI tools are driving attack costs toward zero, putting the financial industry's existing defenses under systemic pressure.
Who was hit, and how?
Hackers launched coordinated attacks on Two Sigma Investments, Citadel, and Point72 Asset Management, along with several private-equity firms, Bloomberg reported citing people familiar with the matter.
The method was "vishing" — voice phishing that uses technology to clone a real person's voice and trick employees into surrendering credentials or system access over the phone.
This means → attackers have moved beyond phishing emails to live voice impersonation — far harder for a human to detect in real time.
What did the targets say?
Two Sigma, which manages $75 billion, said it successfully blocked the intrusion and saw "no indication that our data or systems were impacted."
Spokespeople for Citadel and Point72 declined to comment on whether their systems were breached.
In plain terms = one firm said "we stopped it"; the other two said nothing — and silence is itself a signal.
How is AI changing the economics of attack?
Vinod Paul, president of Align Managed Services — a cybersecurity firm serving hedge funds — said a targeted attack used to reach 50 targets at most. Now it can reach 1,000.
This means → AI has turned cyberattacks from craft sniping into industrial-scale sweeps — cost barely changes, but reach grows 20×.
Will Wilson, CEO of Antithesis — a cybersecurity firm backed by Jane Street — put it bluntly: AI has commoditized offensive capability. "Everyone has to get serious about raising their security, or they're going to be in real trouble."
What are regulators and the industry doing?
The Financial Industry Regulatory Authority (FINRA) has been in contact with member firms about the recent attacks.
In March this year FINRA launched the "Financial Intelligence Fusion Center," a platform for regulators and firms to share threat intelligence and coordinate responses.
This reflects a recognition that the threat has escalated — but the platform is barely six months old and already facing a live test. Whether it can keep pace with attack tempo remains unproven.
Is this wave an isolated event?
Google's cybersecurity unit documented a similar wave of voice-phishing attacks on law firms and other professional-services firms in June, with some attackers even impersonating IT staff to enter offices in person.
Separately, cyberattacks on water systems in multiple U.S. states have raised concerns about potential Iranian involvement — though no link to the hedge-fund attacks has been confirmed.
In plain terms = finance, law, municipal infrastructure — all hit in quick succession with strikingly similar techniques. This looks less like an isolated incident and more like the same generation of attack tools rolling across industries.
Content is for reference only, not financial advice.