Social EngineeringFinancial ServicesHealthcareFinancePhishingStolen CredentialsShinyHuntersTargetedData ExfiltratedIdentity (basic)Government IDHighResolved

ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

bd_1d2130d2e025ff0d · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 17, 2025

Filed

Oct 1, 2025

To disclose

11 weeks

Affected

8,106state residents only

Linked

17 filings

Confidence

65%

Full breach record for ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA →10 incidents on file

Allianz Life Insurance Company of North America reported a supplemental data security incident to the New Hampshire Attorney General. On July 16, 2025, threat actors identified as ShinyHunters accessed a cloud-based Salesforce CRM via social engineering. The incident affected 8,106 New Hampshire residents, exposing names, dates of birth, and Social Security numbers. The incident was contained on July 17, 2025, and notifications were sent beginning August 1, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 11 weeks / 76 days

Jul 16, 2025

Begins

Jul 17, 2025

Discovered

Oct 1, 2025

Filed

vs. sector median

+3 wks slower

This filing is one of 17 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_ae285894329d7b872025-10-01Verified
Texas State AGbd_dfe5c0e3ff33260b2025-10-02 · +1dVerified
Maine State AGbd_954aeb2a87d1be622025-09-30 · +1dVerified
Montana State AGbd_750c673287c1a6742025-09-29 · +2dVerified

Show 6 more filings ↓up to 68d gap

Rhode Island State AGbd_c46349c3bbe0c4052025-09-09 · +22dVerified
Indiana State AGbd_20e97e50104a5ef62025-08-01 · +61dVerified
Delaware State AGbd_a31bcd7491a132a42025-08-01 · +61dVerified
New Hampshire State AGbd_e0ee904e6837e8712025-07-28 · +65dVerified
Iowa State AGbd_1ed5a4cf2445eb002025-07-25 · +68dCandidate
California State AGbd_5bf86c9deb891d4a2025-07-25 · +68dVerified

Showing first 10 of 16 linked disclosures.

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america
Industry: Financial ServicesllmHealthcarellm

Discovered: Jul 17, 2025
Breach occurred: Jul 16, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Aug 1, 2025
Affected individuals: 8,106state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Phishing· ShinyHunters
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ShinyHuntersExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigations (FBI)Notified New Hampshire Office of the Attorney General
Initial access: phishing_link

During the incident: Notified the Federal Bureau of Investigations (FBI)
Engaged Mandiant, a leading cybersecurity consultant, and Kroll, a global data analytics firm, through counsel to confirm the scope of impacted data and individuals
Provided two years of complimentary identity theft protection and credit monitoring
Changes made: Taken steps to strengthen system protections
Continues to assess and evaluate additional measures to further enhance its overall security posture
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Iowa State AGJul 25 · first

California State AGJul 25 · first

New Hampshire State AG+3d

Indiana State AG+7d

Delaware State AG+7d

Rhode Island State AG+46d

Montana State AG+66d

Maine State AG+67d

California State AG+68d

New Hampshire State AG+68d · this page

Texas State AG+69d

Pattern: first filing Jul 25 (IA), last Oct 2 (TX) — a 69-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 16 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/allianz-life-insurance-north-america-20251001.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2025
Raw hash: f0aaed0e3ae9109d2d004dac60d2236054031ce597578f7a745cc43df8656679

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Victim entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Incidentdiscovered Jul 17, 2025

Stated responseNotified the Federal Bureau of Investigations (FBI)

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov