Allianz Life says July data breach impacts 1.5 million people

Allianz Life has completed the investigation into the cyberattack it suffered in July and determined that nearly 1.5 million individuals are impacted. The American insurance giant has notified all potentially affected individuals that their names, addresses, dates of birth, and social security numbers (SSN) has been compromised. Allianz Life is part of Allianz SE and provides annuities and life insurance for more than 1.4 million Americans. Allianz SE, which is a global giant with over 125 million customers, was not impacted. In late July, the American insurance company informed the public that it had suffered a data breach impacting most of its customers, after a threat actor gained access to a third-party cloud-based CRM (Customer Relationship Management) system they used. Although not officially confirmed, BleepingComputer has learned that the attack was likely part of the Salesforce attack wave conducted by the ShinyHunters extortion group. Three weeks after the attack was disclosed, the Have I Been Pwned service noted that number of impacted individuals was 1.1 million, based on the breached data it obtained. The company is now informing affected customers and shared the data breach notification with U.S. authorities. The total number of persons impacted by the cyberattack is 1,497,036 and includes customers, financial professionals, and employees. “On July 16, 2025, a malicious threat actor gained access to a cloud-based system used by Allianz Life,” reads the notice. ...