In the first days of August 2026, Bloomberg reported a coordinated wave of intrusion attempts against major Wall Street managers, including Citadel, Point72 Asset Management, Two Sigma Investments, Millennium Management, and several unnamed private equity firms. The attacks used phone calls carrying cloned voices of known employees to request credentials, password resets, second-factor codes, and access to internal systems, rather than ordering wire transfers. Two Sigma, managing roughly 75 billion dollars, said its security team responded quickly with no evidence of impact on data or systems. Point72 informed investors that a preliminary review found no exfiltration of client information, with checks ongoing. Citadel and Millennium declined to comment. FINRA activated the Financial Intelligence Fusion Center, a fraud-intelligence sharing portal created in March 2026, marking its first real-world test. The simultaneous timing across competing firms indicated a planned campaign. Voice cloning vendors claim a few seconds of audio are enough to produce an acceptable clone, and public audio of executives is widely available. The shift from fraudulent transfers to login access changes the risk profile, as valid credentials could allow indefinite exfiltration of positions, strategies, and investor data.