Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack

U.S. insurance giant Allianz Life has confirmed to TechCrunch that hackers stole the personal information of the “majority” of its customers, financial professionals, and employees during a mid-July data breach.

Allianz Life spokesperson Brett Weinberg confirmed the breach, stating, “On July 16, 2025, a malicious threat actor gained access to a third-party, cloud-based CRM system used by Allianz Life.” This customer relationship management (CRM) database contained sensitive information. The spokesperson added, “The threat actor was able to obtain personally identifiable data related to the majority of Allianz Life’s customers, financial professionals, and select Allianz Life employees, using a social engineering technique.”

The company publicly disclosed the data breach on Saturday in a legally required filing with Maine’s attorney general. While a specific number of affected customers was not immediately provided in the filing, Allianz Life has 1.4 million customers in total. Its global parent company, Allianz, serves over 125 million customers worldwide.

Allianz Life has notified the FBI regarding the incident and stated that they have “no evidence” that any other systems on their network were compromised. The insurance giant declined to comment on whether they had received any communication from the hackers, such as a ransom demand, or to attribute the breach to a specific hacking group.

This incident positions Allianz Life as the latest company in the insurance industry to be impacted by a wave of cyberattacks over the past month. Other major providers, including Aflac, have also reported similar data compromises. Security researchers at Google noted in June that they were “aware of multiple intrusions” across the insurance sector, primarily attributed to Scattered Spider. This collective of hackers is known for relying on social engineering techniques, such as deceptively calling and tricking helpdesks into granting network access.

Before targeting insurance companies, Scattered Spider hackers were observed compromising the U.K. retail industry, as well as the aviation and transportation sectors. Historically, they have also been responsible for significant hacks targeting Silicon Valley technology giants.

As per the filing with the Maine Attorney General, Allianz Life plans to commence notifying affected individuals around August 1, 2025.

Do you have more information about the Allianz Life cyberattack? Are you an affected customer or employee? Securely contact reporters via encrypted message at zackwhittaker.1337 on Signal.