Allianz Life data breach impacted 1.5 Million people

Allianz Life disclosed that a data breach exposed data from a cloud CRM, with the total number of affected individuals reaching 1,497,036, and the incident impacting its North America branch. The breach exposed personal details such as names, addresses, birth dates, and Social Security numbers, along with professional information across Accounts and Contacts tables that comprise about 2.8 million records.

A threat actor accessed a third‑party CRM system on 16 July 2025 using social engineering to compromise data belonging to customers, financial professionals, and some employees, according to the notice. The company said there is so far no evidence that its internal network or critical systems were accessed, and it has notified the FBI while beginning to inform affected individuals and offer support.

Although Allianz Life did not name the threat actor, Bleeping Computer reported that the breach is believed to be linked to ShinyHunters, with the leaked Salesforce data publicly claimed by threat actors via a collaborative channel involving Scattered Spider and Lapsus$. In response, Allianz Life is providing two years of free Kroll Identity Monitoring to help detect misuse of personal data. According to the Maine Attorney General’s Office notice, the total number of persons affected is 1,497,036.