Overview

• On July 16, attackers used social engineering to breach a third-party cloud CRM and accessed personal data of most of Allianz Life’s 1.4 million U.S. customers, financial professionals, and some employees.
• Allianz Life notified the FBI immediately upon discovery and has reported the incident to the Maine Attorney General’s Office in a mandatory July 26 filing.
• The ongoing investigation has determined that no internal Allianz Life systems or broader company networks were compromised in the attack.
• Starting August 1, affected individuals will receive formal alerts along with 24 months of credit monitoring and identity theft protection.
• Although Allianz Life has not officially named a culprit, security researchers have pointed to the ShinyHunters extortion group as a possible threat actor.