Allianz Life Insurance data breach exposes 1.4 million Americans

Cybercriminals are always looking for new companies to attack, and the insurance industry seems to be a favorite. Insurance companies are lucrative targets because of the vast amounts of personal, financial and medical information they collect and store.

Only recently, U.S. insurance giant American Family Life Assurance Company (Aflac) confirmed it was among the victims of a notorious cyber gang. Now, another insurance provider has fallen prey to a data breach. Allianz Life Insurance Company of North America has disclosed a breach that exposed personal information belonging to the “majority” of its 1.4 million customers.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER  

MULTIPLE US CANCER CENTERS HIT IN COORDINATED PHISHING BREACH

Illustration of hackers at work in a dark room   (Kurt "CyberGuy" Knutsson)

How the Allianz data breach happened

The Minneapolis-based insurer told CyberGuy hackers accessed a cloud-based customer relationship management (CRM) platform used by the company. The breach occurred on July 16 and involved the compromise of data belonging not just to customers, but also financial professionals and some employees.

GET FOX BUSINESS ON THE GO BY CLICKING HERE

According to Allianz, the attacker used a social engineering technique to break in, though the company did not disclose further details. Social engineering attacks typically involve tricking employees into revealing passwords or installing malicious software that gives attackers access to internal systems.

Allianz said it “took immediate action to contain and mitigate the issue” and has notified federal law enforcement, including the FBI. The company added that there is “no evidence that the Allianz Life network or other company systems were accessed, including our policy administration system.” 

Illustration of a hacker at work  (Kurt "CyberGuy" Knutsson)

What personal data was exposed

Allianz did not specify what kind of customer data was taken, but life insurance providers often store highly sensitive information such as Social Security numbers, dates of birth and financial details.

The company also didn’t say who might be behind the attack. But cybersecurity researchers recently warned that Scattered Spider, a financially motivated hacking group known for using social engineering tactics, has been actively targeting insurance companies in recent months.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

Allianz said its investigation remains ongoing and that it has begun reaching out to those affected, offering support through dedicated resources.

Allianz Life Insurance Company of North America is a subsidiary of Germany-based Allianz SE, one of the world’s largest financial services firms. The breach appears limited to the U.S. arm of the company.

A person scrolling on a smartphone   (Kurt "CyberGuy" Knutsson)

Best ways you can stay safe after a data breach

If your personal information has been exposed in a data breach, taking the right steps immediately can help you limit the damage, protect your identity and prevent future fraud.

1. Invest in a data removal service

You can’t undo the damage once hackers have accessed your data. However, you can limit the fallout by investing in a data removal service. A data removal service can help you remove all this personal information from the internet. 

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com/Delete

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com/FreeScan

2. Use identity theft protection services

Your Social Security number or other sensitive data may have been exposed in the data breach. Identity Theft companies can monitor personal information like your Social Security number, phone number and email address and alert you if it is being sold on the dark web or being used to open an account. They can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.

See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com/IdentityTheft 

3. Enable two-factor authentication (2FA)

Turn on 2FA for your email, banking and insurance logins. Even if a hacker has your password, 2FA requires a second verification step, like a code sent to your phone, making unauthorized access much harder.

4. Be wary of phishing and follow-up scams

After a data breach, attackers often follow up with phishing emails or phone calls. They pretend to be from your insurance company or a support service. Don’t click on links in unsolicited messages and verify any claims through official channels before responding. The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com/LockUpYourTech

5. Freeze your credit right away

Put a credit freeze on your files with Equifax, Experian and TransUnion. This stops criminals from opening new accounts in your name. It’s free, easy to set up and you can lift the freeze temporarily when needed. 

6. Update your passwords now

Change your passwords for all important accounts. Start with email, financial and health-related logins. Use strong, unique passwords for each account. Consider using a password manager, which securely stores and generates complex passwords, reducing the risk of password reuse. 

Check out the best expert-reviewed password managers of 2025 at Cyberguy.com/Passwords

7. Check your accounts for strange activity

Look for any signs of identity misuse, like:

• Unknown charges
• Logins from unfamiliar devices
• New accounts or lines of credit you didn’t open

Early detection makes a big difference.

8. Report identity theft fast

If someone is misusing your identity, go to IdentityTheft.gov. This government site provides step-by-step help and generates the letters and reports you’ll need to stop the fraud.

CLICK HERE TO GET THE FOX NEWS APP

Kurt’s key takeaway

The Allianz Life breach fits a pattern we’ve seen too often. Attackers targeted a third-party vendor, stole customer data and triggered a response from the company. Allianz claims it acted quickly to contain the breach and alert authorities, but it hasn’t explained what data the attackers stole or how they pulled it off. This silence raises serious concerns.

Do you trust insurance companies to protect your personal data? Let us know by writing to us at Cyberguy.com/Contact

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER

Copyright 2025 CyberGuy.com.  All rights reserved.