Insight Partners Hit by Months-Long Ransomware Attack, Exposing Data of 12,600 Individuals Insight Partners, a $90 billion venture capital firm backing cybersecurity leaders like Wiz and Databricks, confirmed a ransomware attack that compromised sensitive data from over 12,600 individuals. The breach, disclosed in filings with the California attorney general, unfolded between October 2024 and January 2025, revealing a prolonged and stealthy operation. Attackers first infiltrated Insight’s human resources systems in mid-October 2024, spending months exfiltrating data before deploying ransomware on January 16, 2025. The stolen information includes banking and tax records, personal details of current and former employees, and data on limited partners private, high-net-worth investors who typically prioritize confidentiality. The breach is particularly notable given Insight’s portfolio, which includes some of the most security-focused companies in tech. The firm’s investments in Databricks ($43 billion valuation) and Wiz (which rejected a $23 billion acquisition offer from Google in 2025) underscore the irony of the attack. Insight attributed the breach to a "social engineering attack," suggesting hackers manipulated employees into granting access rather than exploiting technical vulnerabilities. The incident highlights persistent risks in cybersecurity, even for firms with deep expertise in the field.