Allianz Life Admits Most Customers’ Personal Data Breached in Cyberattack

Allianz Life, a prominent insurance provider in the U.S., has informed TechCrunch that a data breach in mid-July led to hackers obtaining personal information from a significant number of its customers, financial professionals, and staff members.

In a discussion with TechCrunch, Allianz Life spokesperson Brett Weinberg confirmed the incident.

“On July 16, 2025, an unauthorized individual accessed a cloud-based CRM system used by Allianz Life,” which stores client data. “This individual was able to extract personally identifiable information regarding the majority of Allianz Life’s customers, financial professionals, and certain employees through social engineering tactics,” the spokesperson explained.

The company reported the breach in a mandatory filing with the Maine attorney general over the weekend but did not disclose the number of customers affected. According to the spokesperson, Allianz Life serves 1.4 million clients, while its parent company, Allianz, boasts over 125 million customers worldwide.

Allianz Life has notified the FBI about the breach and clarified that there is “no evidence” suggesting that any other systems within its network were compromised.

The insurance company did not reveal whether they received any communication from the hackers, including ransom requests, nor did they link the breach to a specific hacking group.

This incident marks Allianz Life as the latest entity in a wave of data breaches affecting the insurance industry, which has also impacted Aflac, a leading supplemental health insurance provider. Security researchers at Google noted in June that they were “aware of multiple intrusions” within the insurance sector, attributed to Scattered Spider, a group of hackers employing social engineering strategies to trick helpdesks into providing network access.

Prior to targeting the insurance sector, Scattered Spider hackers focused on the U.K. retail sector, along with aviation and transportation industries, and have a history of attacking Silicon Valley tech companies.

According to the filing with Maine, Allianz plans to begin notifying affected individuals around August 1.

If you have more information about the Allianz Life cyberattack or are a customer or employee affected by this incident, please contact this reporter securely via encrypted message at zackwhittaker.1337 on Signal.