Allianz Life Insurance Company of North Americahas confirmed a data breach that exposed the personal information of the majority of its 1.4 million customers. The incident, which occurred in mid-July, is linked to unauthorized cloud-based CRM system third-party used by the company.
According to an Allianz Life spokesperson, the breach was detected on July 16, 2025 and is attributed to a malicious actor who leveraged techniques social engineering to gain access to the CRM. The attack affected not only customers, but also financial advisors and employees of the company.
See also: US: Dior sends out data breach notifications
"We took immediate containment measures and notified the FBI," Allianz Life said, adding that so far there is no indication that internal systems or core network.
The company is currently investigating and has already started the process of notifying affected individuals, offering support through dedicated resources. The data breach is related exclusively to Allianz Life, and does not appear to affect other activities of parent Allianz SE, which serves more than 128 million customers worldwide and is headquartered in Germany.
ShinyHunters Involvement – Salesforce CRM in the Target ?
While Allianz Life did not confirm the name of the compromised CRM or provide details about the attacker, information from BleepingComputer links the attack to the notorious cybercrime ShinyHunters, an organized crime ring responsible for a number of high-profile data breaches, including those at Santander, Ticketmaster, AT&T, Neiman Marcus , and Advance Auto Parts.
See also: Hong Kong: Investigation into Louis Vuitton data breach
The group has reportedly recently focused its attacks on Salesforce CRM, using social engineering techniques and posing as IT support staff to trick employees of targeted companies into accepting connections to the Salesforce Data Loader, through which they then extract sensitive data.
Although Allianz Life declined to comment on whether the CRM in question was Salesforce, the temporal and technical similarity to the ShinyHunters attack pattern is notable.
Emerging threats in the cloud
The Allianz Life data breach highlights a broader and growing trend in cyberspace: the exploitation of third-party cloud service providers and CRM platforms for large-scale attacks. Social engineering techniques, especially when combined with data extraction software like Salesforce Data Loader, make data protection more complex than ever.
See also: Episource: Notifies customers of recent data breach
ShinyHunters and similar groups systematically exploit the connectivity and trust that exists in internal IT environments, striking where defenses rely more on human judgment than technological armor.
Source: www.bleepingcomputer.com
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
