Particle.news

Download on the App Store

Allianz Life Prepares Notifications After CRM Breach Exposes Majority of U.S. Client Data

Notifying the FBI, Allianz Life will provide affected customers 24 months of identity-theft protection.

The New York headquarters of German Allianz insurance company on Sunday, November 23, 2014. Allianz plans to sue Volkswagen over its drop in share price resulting from the Volkswagen emissions scandal. ( Richard B. Levine) (Photo by Richard Levine/Corbis via Getty Images)
Image
Image
Image

Overview

  • On July 16, attackers used a social-engineering technique to breach a third-party cloud CRM and access personally identifiable information for most of Allianz Life’s 1.4 million U.S. customers, financial professionals and select employees.
  • The insurer disclosed the incident on July 26 in a filing with Maine’s attorney general and has begun sending individual breach notices ahead of an August 1 rollout.
  • Allianz Life has informed the FBI and reports no evidence that its core network or policy administration systems were compromised beyond the CRM platform.
  • A regulatory filing states impacted individuals will receive 24 months of identity-theft protection and credit monitoring services.
  • Though no official attribution has been announced, security reports suggest the ShinyHunters extortion group may be responsible in a wave of recent insurance-sector hacks.