Allianz Life US Hit by Major CRM-Based Data Breach

On July 16, 2025, Allianz Life Insurance Company of North America experienced a severe data breach affecting approximately 1.4 million customers and employees. The attack stemmed from a social engineering exploit targeting a third-party cloud–based CRM platform, bypassing internal company systems entirely.

Allianz disclosed the incident publicly on July 27, 2025, confirming sensitive information like names, addresses, and dates of birth were exposed—but no financial or payment data. The company immediately initiated containment measures, notified the FBI, and began offering impacted individuals 24 months of identity theft protection and credit monitoring.

Industry experts highlighted that this breach exemplifies a broader trend—30% of enterprise breaches in 2025 involved third-party vendors, up from 15% the previous year—underscoring the urgent need for Zero Trust architectures and stronger external access controls. Allianz emphasized that its internal systems remain uncompromised and continues to investigate the attacker’s identity and tactics.