- Breach exposes customer data via a third-party using social engineering.
- Affected users are being notified and offered ID protection.
Hackers gained access to the personal information of most of Allianz Life Insurance Company of North America’s 1.4 million customers during a recent cyberattack, the company confirmed over the weekend.
The breach occurred on July 16 through a third-party, cloud-based platform used by Allianz Life. The company said a “malicious threat actor” exploited the system using a social engineering tactic – a method that typically involves tricking someone into handing over login details or access credentials.
Allianz Life, based in Minneapolis and owned by German financial group Allianz SE, said the attackers were able to collect personally-identifiable information, including data related to customers, financial professionals, and some of the company’s employees.
In a public statement, the company said it responded immediately after discovering the attack. Allianz Life has also reported the breach to several authorities, including the Maine Attorney General’s Office.
So far, the company has confirmed that the breach only affected the third-party platform, not its internal systems. An investigation is still underway. Impacted individuals are being contacted directly, and Allianz Life is offering 24 months of free identity theft protection and credit monitoring to those affected.
A filing with the Maine Attorney General’s Office shows that Allianz Life discovered the breach on July 17, one day after the attack. The company has not disclosed exactly what type of personal information was accessed.
Allianz Life operates as one of five North American subsidiaries of Allianz SE, which serves over 125 million customers worldwide. The US entity was previously known as North American Life and Casualty before being acquired by Allianz SE in 1979. It employs nearly 2,000 people in the US, with most staff located in Minnesota.
The latest breach adds to a string of cyberattacks targeting major players in the insurance sector. In June, Aflac – a large US insurance provider known for its supplemental health coverage – also reported a cybersecurity incident. The company said hackers gained access to systems on June 12 and stole an unspecified amount of customer information. This included social security numbers, health records, and data tied to insurance claims. The breach extended beyond customers to include employees, agents, and listed beneficiaries.
Aflac said ransomware was not involved. Instead, it attributed the breach to a cybercrime group using social engineering tactics. These kinds of attacks often involve impersonating staff or executives over email, phone, or even video calls to manipulate employees into providing access.
The company filed a notice with the US Securities and Exchange Commission and said it had contained the incident. However, it remains unclear how many individuals were affected.
Both Allianz Life and Aflac appear to be part of a broader pattern of attacks aimed at the insurance industry. According to security researchers at Google, multiple US insurers have been targeted in recent months by a hacker group known as Scattered Spider. It’s known for using social engineering methods and has previously attacked companies in the retail, aviation, and tech sectors.
The rise in these breaches points to a growing need for companies – especially those handling sensitive financial and health data as third-parties – to invest in stronger internal training and to scrutinise third-party platforms more carefully. While software protections are important, recent attacks highlight a consistent weak spot: human error and manipulation.
As Allianz Life and other firms work through their investigations, cybersecurity experts warn that the threat isn’t going away. In many cases, attackers are getting in not by breaking down firewalls – but by simply asking to be let in.
