AI-Generated Voice Scams Target Citadel, Point72 and Two…

In early August 2026, several of Wall Street's largest hedge funds, including Citadel, Point72, and Two Sigma, were targeted in a coordinated AI-powered voice phishing, or vishing, campaign. The attackers sought to gain unauthorized access to internal systems by impersonating trusted colleagues and executives through sophisticated voice-cloning technology.

What happened

The attackers utilized AI-powered sound technology capable of listening to phone calls to replicate the voice, tone, and phrasing of specific individuals. By fabricating convincing phone calls that mimicked trusted personnel, the cybercriminals attempted to manipulate employees into surrendering passwords, granting remote access, or sharing other sensitive information.

Two Sigma Investments, a $75 billion quantitative fund, confirmed it was a target of this campaign but stated that its security team intercepted the attempt before any data or systems were compromised. Both Citadel and Point72 Asset Management were also on the attackers' target list, though spokespeople for those firms declined to comment on whether any breaches occurred. Beyond major hedge funds, several private equity firms were also identified as targets in the coordinated wave of attacks.

There have been no publicly disclosed reports of successful breaches, stolen data, ransom demands, or financial losses associated with this specific incident. Following the attempt, the Financial Industry Regulatory Authority (FINRA) began connecting the affected firms with threat intelligence through its Financial Intelligence Fusion Center, a body launched in March to coordinate responses to sophisticated threats. Security experts have noted that the incident highlights how AI has commoditized hacking capabilities, allowing for attacks at a scale that was previously impossible, while corporate and regulatory defenses continue to struggle to keep pace with the rapid exploitation of these voice synthesis tools.