Insurance coverage firm Allianz Life has confirmed that the non-public data for the “majority” of its 1.4 million prospects was uncovered in a knowledge breach that occurred earlier this month.
“On July 16, 2025, a malicious risk actor gained entry to a third-party, cloud-based CRM system utilized by Allianz Life Insurance coverage Firm of North America (Allianz Life),” an Allianz Life spokesperson advised BleepingComputer.
“The risk actor was in a position to acquire personally identifiable information associated to nearly all of Allianz Life’s prospects, monetary professionals, and choose Allianz Life staff, utilizing a social engineering method.”
“We took speedy motion to include and mitigate the problem and notified the FBI. Primarily based on our investigation to-date, there isn’t a proof the Allianz Life community or different firm techniques have been accessed, together with our coverage administration system.”
“Our investigation is ongoing and we started the method of reaching out to people impacted with devoted sources to help them. This incident is expounded solely to Allianz Life, which at present has 1.4 million prospects.”
Allianz Life is a US-based supplier of annuities and life insurance coverage for over 1.4 million People. The corporate is owned by Allianz SE, a world monetary providers group headquartered in Germany, serving greater than 128 million prospects.
The corporate first revealed the breach in a compulsory submitting with Maine’s Legal professional Normal’s Workplace on Saturday, issuing a placeholder notification alerting of the breach.
“The patron discover will likely be supplied as soon as Allianz has recognized the affected people,” reads the placeholder notification.
Whereas Allianz Life declined to reply questions concerning the risk actor and whether or not they have been being extorted, BleepingComputer has realized that the assault is believed to have been carried out by the ShinyHunters extortion group.
ShinyHunters is a gaggle of risk actors who’re linked to a number of high-profile information breaches and assaults, together with these in opposition to PowerSchool and the SnowFlake assaults, which impacted Santander, Ticketmaster, AT&T, Advance Auto Components, Neiman Marcus, and Cylance.
Whereas a number of ShinyHunters members have been arrested over the previous few years, together with a latest arrest in France, the hacking group continues to conduct assaults.
Final month, Mandiant warned that ShinyHunters had begun to goal Salesforce CRM prospects in social engineering assaults.
Throughout these assaults, the hackers impersonate IT help personnel, requesting the focused worker settle for a connection to Salesforce Information Loader, a shopper utility that permits customers to import, export, replace, or delete information inside Salesforce environments.
As soon as the connection is accepted, the risk actors use Salesforce Information Loader to exfiltrate information from Salesforce, which is then used to extort the corporate.
BleepingComputer requested Allianz Life if the CRM is Salesforce, however the spokesperson declined to remark.
CISOs know that getting board buy-in begins with a transparent, strategic view of how cloud safety drives enterprise worth.
This free, editable board report deck helps safety leaders current danger, impression, and priorities in clear enterprise phrases. Flip safety updates into significant conversations and sooner decision-making within the boardroom.