Est. 2001·3,000+ placements · six offices · four regions
Cybersecurity Incidentcurated sourcedetected 2026-08-07 · confidence 95%

Last updated

KKR: Cybersecurity Incident

Hackers devised phishing websites targeting employee credentials at KKR and multiple other major financial institutions and private equity firms. Attack coordinated by threat actors operating under names including Redact, Pink, Falcon and Helix.

Source: PYMNTS

Who
KKR · Technology · USA
What happened
Hackers devised phishing websites targeting employee credentials at KKR and multiple other major financial institutions and private equity firms. Attack coordinated by threat actors operating under names including Redact, Pink, Falcon and Helix.
When
2026-08-07
Source
PYMNTS

Market context: This lands while the Talent Market Index reads 97.6 (Neutral) — down 3.4 versus the prior month — and Americas signal share is easing (-15.6pts).

KKR: 3 signals in the last 90 days — above the Technology median of 1 across 150 tracked companies; 0.3% of MitchelLake's Asia signal flow; 16 tracked across 187 days.

MitchelLake in this thematic

From the MitchelLake archive

Also at KKR →

More signals across Technology

Cybersecurity Incident · Americas

DigiCert →

DigiCert disclosed a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.

Cybersecurity Incident · Americas

Zip Co. →

Australian payments firm Zip Co. flagged A$10.1 million ($7.1 million) in expenses tied to an external fraud event in the US, and its shares roughly halved.

Cybersecurity Incident · Americas

Splunk →

Splunk MCP Server contains a critical Remote Code Execution vulnerability (CVE-2026-76404, CVSS 9.1) caused by insecure deserialization in credential management, affecting versions prior to 1.2.1. Additionally, the MCP protocol specification itself contains a structural vulnerability allowing automatic fetching of attacker-controlled links. Both exposures are high-risk given the server's access to enterprise observability crown jewels (logs, alerts, dashboards, real-time search).

Cybersecurity Incident · Americas

Huawei Technologies →

Huawei faces criminal racketeering trial in New York with charges including theft of trade secrets, plotting to steal U.S. trade secrets, wire and bank fraud, sanctions violations in North Korea, and installation of surveillance equipment used by Iran to monitor protesters in 2009.

Cybersecurity Incident · Americas

RingCentral →

ShinyHunters extortion group breached RingCentral in July 2026, stealing personal information from 1.6 million customer accounts. Incident confirmed via Have I Been Pwned data breach notification service.

Cybersecurity Incident · Americas

Klue →

Market research company Klue experienced a data breach. Stolen customer data is being deleted by the original hacking group, but a second group of hackers is now making ransom threats.

Where this lands in our work

Weekly briefing

Track companies like KKR — with our analysis

Anyone can set an alert for one company. We send a weekly read on the whole peer set — who's moving, and what it means for leadership. Pick what to follow:

Intelligence powered by Autonodal ↗

Nearby in the record