Major Hedge Funds Face Wave of Voice-Phishing Cyberattack Attempts

On August 5, 2026, people familiar with the situation described a campaign that hit some of the biggest names in Wall Street money management.

The method was vishing, a twist on phishing where attackers use technology to fake a voice over a call or message. The goal is simple: trick an employee into handing over sensitive data or letting the attacker inside.

Two Sigma, which manages about $75 billion in assets, said it caught the attempt before anything got through. "Our security team responded quickly to an attempted vishing campaign targeting Two Sigma and other investment managers, and we have no indication of any impact to our data or our systems," a spokesperson said. "We continue to monitor the situation closely."

Citadel and Point72 did not have much to say. Their spokespeople would not confirm whether their systems had been breached, and that silence leaves a real question mark over two of the most high-profile funds in the business.

Why the Threat Is Growing

The people behind these attacks are not inventing a new trick. They are using cheap, powerful AI to scale up an old one, and that changes everything.

Vinod Paul of Align Managed Services, a security and IT firm that works with hedge funds, explained the jump in scale. Before, an attacker could target about 50 organizations in one focused campaign.

Now, with AI, the same attacker can go after 1,000. The tools also get personal.

The money story behind the headlines is usually the part that matters. Join Market Briefs free and get it every morning.

Paul said hackers can listen to a phone call and copy a speaker's voice, tone, and phrasing, then use that copy to make fake calls that are hard to question. That math helps explain why cyberattacks on Wall Street have risen sharply in the last year.

The cost of trying to break in has collapsed, and the payoff is huge. Daily trading activity on Wall Street involves trillions of dollars, so a successful intrusion into the wrong firm could be more than a headache.

In some cases, attackers are looking for payments to unlock locked data or systems. That turns one bad login into a financial shakedown.

Regulators have started to respond. In June, Google's cybersecurity unit posted about a wave of attacks this year aimed at law firms and other professional-services companies.

The tactics included vishing and impostors walking into offices dressed as IT workers. In March, Finra, the broker-dealer regulator, launched the Financial Intelligence Fusion Center, a secure place where member firms can share fraud-threat intelligence and coordinate an answer.

Finra also contacted member firms about the recent attempted hedge fund breaches, according to another informed source. Finra declined to comment.

The hedge fund campaign may have nothing to do with the recent wave of cyberattacks on water systems in several U.S. states, which raised concerns about possible ties to Iran.

What This Means for Investors

The people who build security tools for finance firms see this as a turning point. Will Wilson, CEO of Antithesis, a Jane Street-backed company that helps firms find and fix software flaws, said the industry used to get by with weak software security because real attacks required rare expertise.

AI erased that barrier. "The terrifying thing about modern day AI systems is that they have commoditized this and made it possible to execute attacks at scale," Wilson said. "Everybody will have to seriously level up. Otherwise they are going to be in big trouble."

The people who manage your money are not treating this lightly. They are dealing with a much craftier threat than they used to.

If a fund handling billions gets locked out of its own systems, that trouble can spill into markets, and markets eventually spill into your portfolio. Two Sigma's quick catch and Finra's new warning hub show the industry is reacting.

The attackers need one good call. That is why every stopped fake call is a quiet reminder that your portfolio depends on someone you will never meet doing dull security work extremely well.

Understanding what moved a market beats knowing that it moved. Get the free Market Briefs daily newsletter and follow the drivers.