Hackers Hit Wall Street: Citadel, Point72, Two Sigma Targeted in AI Vishing Wave

A coordinated wave of cyberattacks hit some of the largest hedge funds on Wall Street this week, with attackers leaning on AI-powered voice phishing rather than traditional malware. Point72 Asset Management, Millennium Management, Two Sigma Investments, and Citadel were all targeted in a coordinated wave of cyberattacks in recent days, with attackers using AI-powered voice phishing to attempt to extract sensitive data from employees of the Wall Street money managers.

What happened

According to a Bloomberg report on Wednesday, Point72 informed investors it had been attacked, though the firm’s initial review found no client information was stolen. The firm told investors it was still reviewing the incident.

Several private equity firms were also targeted as part of the assault, though those names have not been disclosed. Two Sigma, which manages $75 billion in assets, told Bloomberg it successfully blocked the attempt.

The vishing playbook

The attacks relied heavily on voice phishing, or “vishing,” a technique where cybercriminals utilize AI and sound technology to mimic the exact voices, tones, and phrasing of legitimate executives or colleagues. By impersonating trusted figures in phone calls or audio messages, the hackers sought to manipulate employees into surrendering sensitive information or granting access to internal networks.

Employees, not technology, were the primary targets of the AI-powered vishing campaign. That shifts the defense burden from firewalls to human awareness training and identity verification workflows.

Do you want to see how to make more plays? Do you want to find gains yourself?

Unusual Whales helps you find market opportunities through our market tide, historical options flow, GEX, and much, much more.

Create a free account here to start conquering the market with Unusual Whales.

Why this matters for markets

Cybersecurity breaches on Wall Street have surged over the past year, as artificial intelligence tools help bad actors launch attacks relatively cheaply and broadly, said Vinod Paul, president of Align Managed Services, which specializes in helping hedge funds with cybersecurity and information technology. “Before they could attack 50 entities in a targeted attack, now they can do 1,000,” Paul said.

Investment firms have overtaken banks as cybercriminals’ top financial target, with attacks nearly doubling since 2023. That is a structural tailwind for enterprise cyber spending, particularly around identity, endpoint, and voice-verification tooling.

Options market and stocks to watch

Cybersecurity names tend to catch a bid on high-profile incidents. Watch for flow and follow-through in:

• CRWD — CrowdStrike, a bellwether for endpoint and identity protection; watch for call flow on any enterprise deal-cycle commentary.
• PANW — Palo Alto Networks; watch for platform-consolidation narrative if hedge fund clients tighten vendors.
• ZS — Zscaler; zero-trust framing lines up directly with vishing-style access attempts.
• S — SentinelOne; a smaller-cap beta play on cyber sentiment moves.
• OKTA — Okta; identity verification sits at the center of any anti-vishing response.

For broader coverage, see more market news here.

Want more market intelligence? Create your free Unusual Whales account for options flow, market tide, GEX, and the full toolkit.