The insurer claimed in a statement that hackers had obtained data on certain workers and the personal information of most of Allianz Life's 1.4 million US clients.

According to a statement from Minneapolis-based Company Allianz Life Insurance Firm of North America, its third-party, cloud-based Customer Relationship Management (CRM) system was compromised by a malevolent threat actor on July 16, 2025. They alerted the FBI and acted right away to control and alleviate the problem.

A division of the Munich-based insurance giant Allianz, Allianz Life, claimed that the hacker, whose identity it did not reveal, had obtained the data through a "social engineering technique."

According to cybersecurity specialists, ransomware attacks that target businesses via their third-party suppliers or vendors have become more frequent. In a large number of occurrences, hackers use a technique known as "social engineering" to trick employees into changing their passwords and resetting authentication procedures in order to obtain sensitive information.

According to the US telecoms company Verizon's 2025 report, third parties were engaged in almost 30% of data breaches, up from 15% the year before. Instead of more sensitive financial data, the personally identifiable information that is frequently obtained in CRM system breaches is restricted to information like names, addresses, and dates of birth.

Globally, Allianz has over 125 million clients. The business provides insurance against cyberattacks and counsels businesses on reducing their vulnerability to the threat through its Allianz Commercial division. According to Allianz Life, the business is still investigating the situation and has discovered "no evidence" that either its internal system or "other company systems" had been compromised.

As part of a required filing with the Maine attorney general, the corporation initially revealed the breach and promised to alert consumers on August 1, almost one week later. According to the Maine application, Kroll, which offers identity theft restoration and monitoring services, will supply consumers with identity theft protection services.