Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack

U.S. insurance coverage large Allianz Life has confirmed to TechCrunch that hackers stole the non-public info of the “majority” of its prospects, monetary professionals, and staff throughout a mid-July knowledge breach.

When reached by TechCrunch, Allianz Life spokesperson Brett Weinberg confirmed the breach.

“On July 16, 2025, a malicious risk actor gained entry to a third-party, cloud-based CRM system utilized by Allianz Life,” referring to a buyer relationship administration (CRM) database containing info on its prospects. “The risk actor was capable of get hold of personally identifiable knowledge associated to the vast majority of Allianz Life’s prospects, monetary professionals, and choose Allianz Life staff, utilizing a social engineering approach,” the spokesperson mentioned.

The corporate disclosed the information breach on Saturday in a legally required filing with Maine’s lawyer basic, however didn’t instantly present plenty of what number of Allianz Life prospects are affected. In line with the spokesperson, Allianz Life has 1.4 million prospects. Its mum or dad firm, Allianz, has greater than 125 million prospects worldwide.

Allianz Life mentioned it notified the FBI, and added it had “no proof” that another methods on its community have been compromised. 

The insurance coverage large wouldn’t say if it had acquired any communication from the hackers, equivalent to a ransom observe. The corporate additionally wouldn’t attribute the breach to a hacking group. 

Allianz Life is the most recent firm previously month to have been hacked throughout a wave of information breaches concentrating on the broader insurance coverage business, including Aflac, a serious supplier of supplementary medical insurance. Safety researchers at Google mentioned in June that they were “aware of multiple intrusions” across the insurance sector attributed to Scattered Spider, a collective of hackers and strategies that depend on social engineering strategies, equivalent to deceptively calling and tricking helpdesks into granting them entry to an organization’s community. 

Previous to concentrating on insurance coverage corporations, the Scattered Spider hackers have been seen targeting the U.K. retail industry, as nicely as the aviation and transportation sectors, and are traditionally identified for hacks targeting Silicon Valley technology giants.

Per the Maine submitting, Allianz plans to start notifying affected people round August 1.

Are you aware extra in regards to the Allianz Life cyberattack? Are you an affected buyer or worker? Securely contact this reporter through encrypted message at zackwhittaker.1337 on Sign.