Overview

• Have I Been Pwned identified about 1.1 million unique Allianz Life customer records in the leak, though dumped Salesforce files contain roughly 2.8 million rows.
• Exposed information includes names, genders, dates of birth, email and physical addresses, and phone numbers, with state filings also citing stolen Social Security numbers.
• Allianz Life says the July 16 intrusion targeted a cloud CRM via social engineering, affecting the majority of its 1.4 million customers as well as some financial professionals and employees.
• The company has notified the FBI, reports no evidence so far of access to internal policy systems, and is offering two years of identity monitoring to affected individuals.
• Researchers and media link the incident to the ShinyHunters and Scattered Spider campaign stealing Salesforce‑hosted data from multiple major companies, including recent leaks tied to Workday, Google and other brands.