Login
iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Powered by MOMENTUMMEDIA
Almost 1.5 million people were impacted by the data breach affecting Allianz Life earlier this year, according to findings by the company.
Back in July, Allianz Life Insurance Company of North America told media that it detected a cyber attack this month that led to personal data being exfiltrated.
“On July 16, 2025, a malicious threat actor gained access to a third-party, cloud-based CRM system used by Allianz Life,” said an Allianz Life spokesperson.
“The threat actor was able to obtain personally identifiable data related to the majority of Allianz Life’s customers, financial professionals, and select Allianz Life employees, using a social engineering technique.”
The cyber attack, which was claimed by Scattered Lapsus$ Hunters, reportedly impacted the company’s Salesforce instance, leading to data exfiltration.
While the company later disclosed that a majority of its 1.4 million US customers were impacted, its latest investigation has revealed that almost 1.5 million individuals were affected.
According to the Office of the Maine Attorney General, a total of 1,497,063 people were impacted by the incident.
Additionally, a data breach notice sent to those impacted seen by Cyber Daily reveals that affected data may include names, addresses, birth dates and social security numbers.
“The threat actor was able to obtain certain personal information related to Allianz Life customers, financial professionals, and select Allianz Life employees,” the notice adds.
“Based on our investigation to-date, there is no evidence the Allianz Life network or other company systems were accessed.”
Prior to the data breach notification, a number of customers launched class actions against the company, demanding compensation for the damages and for Allianz Life to improve its security.
The first class action was submitted on 31 July 2025 by customer Sylvia Herrera in the United States District Court for the District of Minnesota.
Herrera said she is representing herself as well as any other customers affected by the breach and has said that Allianz failed in its responsibility to keep the data safe and lacked enough security measures.
She also said the company took too long to notify affected customers, which the company said it’s still identifying, according to media reports.
Herrera said that customers, including herself, have wasted both time and money on the careful monitoring of their accounts and are demanding compensation for legal expenses, damages, and for the court to order Allianz to improve its data security.
A day later, a second class action against Allianz Life was launched in the same court by Cheryl Marotta of Massachusetts and David Werner of Missouri, both of whom are Allianz Life customers.
Similarly, the two represent themselves and all customers and accuse Allianz of failing to administer the proper safeguards needed to secure data, adding that the data was stored in a single database and not encrypted.
Marotta added she noted suspicious activity, including an increase in spam calls and texts, and an email claiming her credit card would be charged.
Similarly, the class action requests damages, restitution and for Allianz to improve its security and future financial audits. It also wants it to provide credit monitoring services.
Be the first to hear the latest developments in the cyber industry.
