U.S. insurance coverage large Allianz Life has confirmed to TechCrunch that hackers stole the non-public info of the “majority” of its clients, monetary professionals, and workers throughout a mid-July information breach.
When reached by TechCrunch, Allianz Life spokesperson Brett Weinberg confirmed the breach.
“On July 16, 2025, a malicious risk actor gained entry to a third-party, cloud-based CRM system utilized by Allianz Life,” referring to a buyer relationship administration (CRM) database containing info on its clients. “The risk actor was capable of receive personally identifiable information associated to nearly all of Allianz Life’s clients, monetary professionals, and choose Allianz Life workers, utilizing a social engineering method,” the spokesperson stated.
The corporate disclosed the information breach on Saturday in a legally required filing with Maine’s lawyer normal, however didn’t instantly present a lot of what number of Allianz Life clients are affected. Based on the spokesperson, Allianz Life has 1.4 million clients. Its mum or dad firm, Allianz, has greater than 125 million clients worldwide.
Allianz Life stated it notified the FBI, and added it had “no proof” that another methods on its community had been compromised.
The insurance coverage large wouldn’t say if it had acquired any communication from the hackers, reminiscent of a ransom notice. The corporate additionally wouldn’t attribute the breach to a hacking group.
Allianz Life is the hosting platform firm prior to now month to have been hacked throughout a wave of knowledge breaches focusing on the broader insurance coverage trade, including Aflac, a serious supplier of supplementary medical insurance. Safety researchers at Google stated in June that they were “aware of multiple intrusions” across the insurance sector attributed to Scattered Spider, a collective of hackers and methods that depend on social engineering methods, reminiscent of deceptively calling and tricking helpdesks into granting them entry to an organization’s community.
Previous to focusing on insurance coverage corporations, the Scattered Spider hackers had been seen targeting the U.K. retail industry, as effectively as the aviation and transportation sectors, and are traditionally identified for hacks targeting Silicon Valley technology giants.
Per the Maine submitting, Allianz plans to start notifying affected people round August 1.
Are you aware extra concerning the Allianz Life cyberattack? Are you an affected buyer or worker? Securely contact this reporter through encrypted message at zackwhittaker.1337 on Sign.