U.S. insurance company Allianz Life has confirmed that a “majority” of its customers, financial professionals, and employees had their personal information stolen during a cyberattack in mid-July. The breach occurred when a threat actor gained access to a third-party cloud-based CRM system used by Allianz Life, resulting in the exposure of personally identifiable data.
Extent of the Data Breach
Allianz Life disclosed the breach in a filing with Maine’s attorney general, stating that they have 1.4 million customers. The parent company, Allianz, has over 125 million customers globally. The company notified the FBI and reported that no other systems on its network were compromised.
Response and Investigations
Despite the breach, Allianz Life has not received any communication from the hackers or attributed the incident to a specific hacking group. The company is cooperating with authorities and plans to notify affected individuals starting August 1. This cyberattack is part of a series of breaches targeting the insurance industry, with security researchers linking it to a group known as Scattered Spider.
Security Measures and Next Steps
Allianz Life’s response to the breach includes notifying affected individuals and enhancing its cybersecurity measures. Customers and employees who believe they may have been affected are encouraged to stay vigilant and report any suspicious activity. The company is committed to safeguarding its customers’ data and preventing future incidents.
