Allianz Life Confirms Data Breach Impacting 1.5 Million Customers

Allianz Life Insurance said the data security incident it suffered earlier this year compromised the sensitive personal data of nearly 1.5 million individuals.

 

Earlier this year, in a filing with the Maine Attorney General’s Office, Allianz Life said that hackers had breached a third-party, cloud-based customer relationship management platform it uses. The cyber attack occurred on July 16 and was discovered the following day.

 

In a statement shared with the media, Allianz confirmed that the attackers used a social engineering tactic to gain unauthorised access and exfiltrated sensitive personal information of customers, financial professionals, and certain employees. The company stressed that the breach was limited to its U.S. operations and did not affect its global network.

 

“Based on the investigation to date, there is no evidence that internal systems or the broader Allianz network were accessed,” the company stated, adding that its core platforms, including the policy administration system, wasn’t unaffected by the data security incident.

 

Although Allianz Life didn’t name the attacker, the breach is believed to be linked to the ShinyHunters group. Along with others claiming ties to ‘Scattered Spider’ and ‘Lapsus$’, they created a Telegram channel, ‘ScatteredLapsuSp1d3rHunters’, and publicly claimed responsibility.

 

The group leaked a database of around 2.8 million records from Allianz Life, including sensitive personal and professional details such as names, contact info, birth dates, Tax IDs, licenses, and company affiliations.

 

However, analysis by Have I Been Pwned found that 1.1 million personal records—names, emails, birth dates, phone numbers, and addresses—were exposed.

 

In a recent filing with the Maine state regulator, Allianz Life said that it has identified at least 1,497,036 individuals whose personal data including names, addresses, dates of birth and Social Security numbers were compromised during the incident.

 

Allianz Life has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

It has also offered two years of complimentary identity protection and credit monitoring services through Kroll to all affected individuals.