Allianz Life customer data taken from a cloud CRM via social engineering
Allianz Life said that on July 16, 2025 a threat actor used a social engineering technique to obtain personally identifiable data from a third-party, cloud-based CRM system the company uses, and filed a notice with the Maine Attorney General. Allianz Life did not name the CRM vendor or the attacker.
- Victim
- Allianz Life Insurance Company of North America
- Industry
- Insurance
- Country
- United States
- Intrusion began
- Jul 16, 2025
- First disclosed
- Jul 26, 2025
- Actor
- Unattributed
- Initial access
- Credential phishing
- Identity control that failed
- Authentication
- MFA
- Not disclosed
- Abused identity
- Human account
- Records affected
- Not disclosed
- Disclosed cost
- Not disclosed
The identity lesson
Access to a SaaS CRM holding customer records rested on a person who could be talked out of it. Phishing-resistant MFA, connected-app restrictions and export monitoring on the CRM are the controls.
Sources
- Allianz Life data breach exposed the data of most of its 1.4M customers, Security Affairs, Jul 27, 2025
- Allianz Life says majority of 1.4 million US customers' info breached, Malwarebytes, Jul 29, 2025
Record verified Oct 31, 2026 against the sources above. Corrections: contact us.
Related incidents
- Aflac network intrusion attributed to social engineering 2025 · Credential phishing
- Dexcom internal documents accessed after targeted vishing 2026 · Credential phishing
- ASOS customer data reached with an employee login obtained by impersonation 2026 · Credential phishing
- RingCentral customer data stolen after a social engineering attack 2026 · Credential phishing
Cite this record
SWI Community Team. (2026). Allianz Life customer data taken from a cloud CRM via social engineering. Identity Breach Database, Start with Identity. https://startwithidentity.com/breaches/incidents/2025-allianz-life-crm-social-engineering/
Part of the Identity Breach Database, free to reuse under CC BY 4.0. Analysis across every record: Identity Breach Report 2026.