Allianz Life Data Breach

On July 16, 2025, attackers used social engineering to gain access to a third-party cloud CRM platform used by Allianz Life. They exfiltrated sensitive personal information belonging to the majority of Allianz Life’s ~1.4 million U.S. customers. The breach was detected the following day. Data later appeared on underground forums.

Allianz Life is a major U.S. provider of annuities and life insurance. Like many insurers, it relies on third-party CRM platforms (Salesforce) to manage customer relationships, creating supply-chain vulnerabilities.

Attackers employed social engineering (impersonating IT helpdesk) to trick employees into authorizing access to the Salesforce Data Loader tool, enabling bulk data extraction.

Vulnerabilities exploited

• Human vulnerability to social engineering
• Third-party CRM access controls

ShinyHunters / Scattered Spider – groups known for targeting SaaS platforms and using social engineering for high-impact data thefts.

Aliases

• SH
• Scattered LAPSUS$ Hunters

Attribution sources

• BleepingComputer
• Obsidian Security
• Allianz Life statements

Countries affected

• United States

Data types

• PII
• Names
• Addresses
• Dates of Birth
• SSNs
• Phone Numbers
• Email Addresses
• Policy Information

Significant regulatory risk, class-action lawsuits, and long-term identity theft exposure for customers.

Public reaction

Concern over exposure of SSNs and financial data among insurance customers.

Multiple class-action lawsuits and regulatory investigations.

Civil lawsuits

• Class-action lawsuits related to data privacy failures

Security improvements

• Enhanced third-party vendor monitoring
• Stricter access controls on CRM platforms

Significance

One of the largest insurance-sector data breaches in the U.S. in 2025, highlighting ongoing SaaS supply-chain risks.

Legacy

Accelerated focus on third-party risk management in the insurance and financial services industry.

Publishing organisations

• BleepingComputer
• SecurityWeek
• Reuters

Allianz Life notified affected individuals and offered credit monitoring; data has been circulated.

Official documents

• Allianz Life Breach Notification
• Maine Attorney General Filing

References

1. [1]Allianz Life official statements
2. [2]SecurityWeek
3. [3]BleepingComputer
4. [4]Have I Been Pwned