On July 23, 2026, Blackstone Inc. experienced a cybersecurity incident where an unauthorized party briefly accessed several employee user accounts. The intruder copied files from certain cloud-based file repositories. Blackstone responded by stopping the unauthorized access, launching an investigation, and notifying law enforcement. Consumers were notified starting around October 5, 2026.
The investigation determined that personal information was affected. Confirmed data types include Social Security numbers and financial account information. Other reported categories that may have been affected include names, addresses, dates of birth, government identification numbers, and medical information. At least 17 Massachusetts residents were affected, though a total nationwide count has not been publicly established.
Blackstone stated that it had no indication the attacker specifically targeted any individual's information or that the information was misused or further disseminated. Affected individuals were offered two years of complimentary identity-monitoring services.