Skip to content

Allianz Life

Disclosed Jul 26, 20251 year ago1,497,036 affectedUnverified

Salesforce CRM social engineering exposes 1.5 million Allianz Life records

Allianz Life said that on July 16, 2025 a threat actor used social engineering to access a third-party cloud CRM and took personal data on the majority of its 1.4 million customers plus financial professionals and employees, including SSNs. ShinyHunters later leaked the data, and Allianz Life later put the total at 1,497,036 people.

What is known

People affected1,497,036 (as reported by the organization)
DisclosedJul 26, 2025
DiscoveredJul 16, 2025
HappenedJul 16, 2025
AttackPhishing
Data exposedDates of birth, Emails, Names, Phone numbers, Addresses, Social Security numbers
SectorInsurance · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Part ofSalesforce (2025)
Check your emailHave I Been Pwned

Sources

Notices filed

WhereFiledPeople
ResearchtotalJul 26, 20251,497,036
Have I Been Pwnedaccounts in the dataAug 18, 20251,115,061

Same campaign

OrganizationAffected
GainsightGainsight app compromise exposes Salesforce data of 200+ companiesNov 19, 202510 months agoSupply chainUnverifiedUnknown
StellantisStellantis North American customer service platform breachedSep 21, 20251 year agoVendor breachUnverifiedUnknown
KeringShinyHunters steal Gucci, Balenciaga and other Kering customer dataSep 15, 20251 year agoHackingUnverifiedUnknown
WorkivaWorkiva customer data stolen from third-party CRMSep 3, 20251 year agoVendor breachUnverifiedUnknown
TransUnionTransUnion third-party app breach exposes 4.4 million consumersAug 26, 20251 year agoVendor breach4.5M
Farmers InsuranceFarmers Insurance vendor breach exposes 1.1 million customersAug 22, 20251 year agoVendor breachUnverified1.1M
WorkdayWorkday third-party CRM breach exposes business contact dataAug 15, 20251 year agoPhishingUnverifiedUnknown
Air France-KLMAir France and KLM customer service platform breachedAug 6, 20251 year agoVendor breachUnknown
GoogleShinyHunters steal business contact data from Google Salesforce instanceAug 5, 20251 year agoPhishingUnverifiedUnknown
PandoraPandora customer names and emails stolen via third-party platformAug 5, 20251 year agoVendor breachUnverifiedUnknown
ChanelChanel US client database breached in Salesforce theft waveAug 4, 20251 year agoVendor breachUnverifiedUnknown
CiscoVishing attack on Cisco CRM exposes Cisco.com user profilesAug 4, 20251 year agoPhishingUnverifiedUnknown
Louis VuittonLouis Vuitton customer data stolen in ShinyHunters SaaS attackJul 10, 20251 year agoHackingUnverifiedUnknown
QantasCall center hack exposes 5.7 million Qantas customers' recordsJul 2, 20251 year agoVendor breachUnverified5.7M
TiffanyVishing attack on Tiffany Korea exposes customer dataMay 26, 20251 year agoPhishing4,600
AdidasAdidas customer service provider hack exposes customer contact dataMay 23, 20251 year agoVendor breachUnverifiedUnknown
DiorDior customer database breach exposed clients' contact detailsMay 13, 20251 year agoVendor breachUnverifiedUnknown
History of this record
  • 2026-09-25 · source_type: aggregator to press · seed source
  • 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/AllianzLife to https://techcrunch.com/2025/07/26/allianz-life-says-majority-of-customers-personal-data-stolen-in-cyberattack/ · seed source
  • 2026-09-25 · campaign: empty to salesforce-2025 · seed source
  • 2026-09-25 · country: empty to US · seed source
  • 2026-09-25 · sector: tech to insurance · seed source
  • 2026-09-25 · data_types: ["dob","emails","names","phone","addresses"] to ["dob","emails","names","phone","addresses","ssn"] · seed source
  • 2026-09-25 · records_basis: hibp to organization · seed source
  • 2026-09-25 · records: 1115061 to 1497036 · seed source
  • 2026-09-25 · disclosed: 2025-08-18 to 2025-07-26 · seed source
  • 2026-09-25 · discovered: empty to 2025-07-16 · seed source
  • 2026-09-25 · summary: In July 2025, Allianz Life was the victim of a cyber attack which resulted in millions of records later being leaked online . Allianz attributed the attack to "a social engineering technique" which targeted data on Salesforce and resulted i to Allianz Life said that on July 16, 2025 a threat actor used social engineering to access a third-party cloud CRM and took personal data on the majority of its 1.4 million customers plus financial professionals and employees, including SSNs. · seed source
  • 2026-09-25 · title: empty to Salesforce CRM social engineering exposes 1.5 million Allianz Life records · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Allianz Life

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.