Insurance firm Allianz Life has stated that hackers have successfully stolen personal information belonging to a significant number of its customers across North America, following a cyberattack that began on July 16, 2025. The breach, which affected a cloud-based CRM system utilized by Allianz Life Insurance Company, has put at risk the data of approximately 1.4 million customers, as well as financial professionals and select employees.
According to Allianz's parent company, the hackers employed social engineering tactics to gain access to sensitive information, leading to concerns about the security of their clients. The incident was reported in a legal filing with the state attorney general in Maine, although exact figures regarding the number of affected individuals were not disclosed.
In response to the breach, Allianz Life indicated they took "immediate action" to address the issue and have engaged the FBI for assistance. They reassured clients that there was "no evidence" of a breach to their internal network or other company systems, including their policy administration system.
Allianz, a major player in the insurance industry with a global customer base exceeding 125 million, has commenced outreach to individuals impacted by this breach. Social engineering attacks typically involve methods where hackers coax or manipulate individuals into divulging personal information under false pretenses, such as posing as credible sources. The repercussions of this incident highlight the necessity for enhanced security measures in the insurance sector to protect sensitive customer data.
