Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack

Allianz Life, a prominent U.S. insurance provider, has disclosed that hackers successfully accessed the personal data of the vast majority of its clients, financial professionals, and some employees during a significant data breach that occurred in mid-July. This revelation was made in a legally mandated report submitted to the Maine attorney general on Saturday. The company, part of the larger Allianz group which boasts over 125 million customers worldwide, has yet to specify the exact number of individuals impacted by this incident. According to Allianz Life spokesperson Brett Weinberg, the breach happened on July 16, 2025, when a malicious actor infiltrated a third-party cloud-based customer relationship management (CRM) system. Weinberg explained that the intruder employed social engineering tactics to extract personally identifiable information from the majority of Allianz Life’s customers, financial professionals, and select employees. Following the breach, Allianz Life promptly notified the FBI and emphasized that there is currently no evidence suggesting any other systems within its network were breached. The company has not disclosed whether it received any communications, such as ransom demands, from the hackers and has not attributed the breach to any specific hacking group. This incident is part of a troubling trend, as Allianz Life joins a growing list of companies suffering cyberattacks, particularly within the insurance sector, which has also seen breaches at Aflac, a key player in supplementary health insurance. In June, Google security researchers reported multiple intrusions affecting various insurance firms, linking these attacks to a group known as Scattered Spider. This group employs social engineering strategies, including deceptive tactics to manipulate helpdesk personnel into granting access to company networks. Previously, Scattered Spider had targeted the U.K. retail sector, as well as aviation and transportation industries, and has a history of breaches involving major tech companies in Silicon Valley. According to the filing with the Maine attorney general, Allianz Life is set to begin notifying affected customers and employees around August 1. If you have more information about the Allianz Life cyberattack or believe you have been affected, please reach out securely to the reporter via encrypted messaging.