Insurance giant says most US customer data stolen in cyber-attack

[SouthBayDem]

Source: BBC

Hackers have stolen personal information of a majority of insurance firm Allianz Life's 1.4 million customers in North America, its parent company said.

"On July 16, 2025, a malicious threat actor gained access to a third-party, cloud-based CRM system used by Allianz Life Insurance Company of North America (Allianz Life)," Allianz said in a statement to the BBC.

The German parent company added that the hackers were "able to obtain personally identifiable data related to the majority of Allianz Life's customers, financial professionals, and select Allianz Life employees, using a social engineering technique".

The data breach was only related to Allianz Life, according to the company.

Read more: https://www.bbc.com/news/articles/cd6nyng861wo

[ananda]

1. I think it only apples to Allianz Life.

If so, other areas of Allianz might be safe.

We'll see.

I went to an Allianz site and it said that no one
could access their profiles because they were
working on the security.

[twodogsbarking]

2. Once again. Let's hook everyone's computers together and see what happens. See what happens.

[Skittles]

6. I just cringe when I hear about THE CLOUD

it is just SOMEONE ELSE'S COMPUTER

[lonely bird]

7. THIS👆

There is no security when any system is connected to the internet.

[Give Peace A Chance]

8. I agree

The internet is a VERY SCARY place!

THINK before you post.

[defacto7]

15. That's a fact,

and just whose computer that is we never really know.

[CloudWatcher]

3. I'm so glad that Musk / DOGE are building an all-in-one database

Stories like this remind me how glad I am that DOGE is combining all the data the US government has on each of us into one giant database. It will be so much better! It'll reduce the effort needed to find those immigrants (legal for now, but just wait until we revoke their temporary protected status). And ofc it'll let the feds target protesters and all those radical liberals I keep hearing about.



Pretty sure Russia already has it, but copies will soon appear on the dark web in 3 ... 2 ...

[Evolve Dammit]

4. Gee. Maybe we could have a cyber security agency to detect and intercept instead of deporting workers who we need???

[The Madcap]

5. Maybe some government somewhere would send their goons to round up the hackers.

But no, we have to round up farm workers and meat packers instead.

[C_eh_N_eh_D_eh]

9. Third-party CRM (Customer Relations Management)

"a third-party, cloud-based CRM system used by Allianz"

So Allianz itself wasn't hit, but a company Allianz had hired to store and analyze their customer data (and no doubt that data includes information their customers never suspected Allianz had to begin with).

"using a social engineering technique"

In other words, some sucker at the CRM company's data center got conned out of their password. They've probably already been identified and disciplined (if not fired outright), but that's no comfort to everyone affected by this.

The story doesn't identify the CRM firm in question. Makes sense, Allianz doesn't want to risk messing up the massive lawsuit they're no doubt bringing over this.

[slightlv]

11. This gives Allianz and other companies who use these strategies "plausible deniability"

They don't feel the need to upgrade their own server security, since the data isn't "stored" on their servers. We saw this coming back in the early days of networked computers. No one listened to us then, and they're still not listening, because it would cost the corporations money on infrastructure. We should all be able to gather together in one enormous case and file suit against one or more of these companies (and the corporations hiring them) on the grounds they played fast and loose with our personal data.

[LuckyLib]

12. These companies have no problem raking in multi

millions in profit, but won’t invest in top notch tech people to manage their systems.

[WilliamPlanke]

10. ID theft fraudulent tax return refund

Every American tax payer affected should Get an identity protection PIN (IP PIN) from the IRS immediately.

If you usually owe taxes then too bad for the hackers. Odds are in their favor, however, that refunds are in the majority.

Probably a good idea for everyone to get an IP PIN after Musk and DOGE have done who knows what.

[Jacson6]

13. Privacy & Internet security are a myth in the 21st century. n/t

[Ford_Prefect]

14. Elon's Data Pirates Strike Again!!!! Film at Eleven.