Overview

• Allianz disclosed in late July that hackers accessed a cloud-stored customer relationship database affecting the “majority” of its 1.4 million customers and employees, but it has not confirmed an exact count.
• Have I Been Pwned now pegs 1.1 million customer records exposed and says the stolen data includes names, gender, dates of birth, emails, home addresses and phone numbers from a Salesforce-hosted database.
• Filings to Texas and Massachusetts regulators state that Social Security numbers were also taken.
• Security reporting links the incident to the ShinyHunters crew, which is reportedly preparing a leak site to pressure victims to pay.
• Other companies including Google, Cisco, Qantas, Pandora and Workday have also reported recent thefts related to Salesforce-hosted data.