Overview

• On July 16, a threat actor used social engineering to access a third-party cloud-based CRM system at Allianz Life
• The breach compromised personally identifiable data of the majority of Allianz Life’s 1.4 million customers, financial professionals and select employees
• Allianz Life filed a mandatory notice with the Maine attorney general and alerted the FBI following the discovery
• Investigators report no evidence that other systems on the company’s network were accessed or further compromised
• Allianz Life will start sending breach notifications to impacted individuals on August 1 and provide dedicated support resources