Overview
- On July 16, attackers used a social-engineering technique to breach a third-party cloud CRM and access personally identifiable information for most of Allianz Life’s 1.4 million U.S. customers, financial professionals and select employees.
- The insurer disclosed the incident on July 26 in a filing with Maine’s attorney general and has begun sending individual breach notices ahead of an August 1 rollout.
- Allianz Life has informed the FBI and reports no evidence that its core network or policy administration systems were compromised beyond the CRM platform.
- A regulatory filing states impacted individuals will receive 24 months of identity-theft protection and credit monitoring services.
- Though no official attribution has been announced, security reports suggest the ShinyHunters extortion group may be responsible in a wave of recent insurance-sector hacks.