Social EngineeringPIIIdentity (basic)Government IDMediumActive

ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

bd_1ed5a4cf2445eb00 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 17, 2025

Filed

Jul 25, 2025

To disclose

8 days

Affected

Not disclosed

Linked

17 filings

Confidence

66%

Full breach record for ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA →10 incidents on file

Allianz Life Insurance Company of North America (AZLNA) reported a data security event to the Iowa Attorney General on July 25, 2025. On July 16, 2025, a threat actor gained unauthorized access to a third-party cloud-based CRM system via social engineering. The incident exposed customer and employee PII, including names, addresses, DOBs, and SSNs. AZLNA terminated access, engaged forensic consultants, notified the FBI, and implemented enhanced security controls. Investigation remains ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 7 days

Jul 16, 2025

Begins

Jul 17, 2025

Discovered

Jul 25, 2025

Filed

This filing is one of 17 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_5bf86c9deb891d4a2025-07-25Verified
New Hampshire State AGbd_e0ee904e6837e8712025-07-28 · +3dVerified
Indiana State AGbd_20e97e50104a5ef62025-08-01 · +7dVerified
Delaware State AGbd_a31bcd7491a132a42025-08-01 · +7dVerified

Show 6 more filings ↓up to 69d gap

Rhode Island State AGbd_c46349c3bbe0c4052025-09-09 · +46dVerified
Montana State AGbd_750c673287c1a6742025-09-29 · +66dVerified
Maine State AGbd_954aeb2a87d1be622025-09-30 · +67dVerified
New Hampshire State AGShinyHuntersbd_1d2130d2e025ff0d2025-10-01 · +68dVerified
California State AGbd_ae285894329d7b872025-10-01 · +68dVerified
Texas State AGbd_dfe5c0e3ff33260b2025-10-02 · +69dVerified

Showing first 10 of 16 linked disclosures.

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america

Discovered: Jul 17, 2025
Breach occurred: Jul 16, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: contact with the FBI regarding this incident
Initial access: phishing_link

During the incident: Terminated access to accounts associated with the suspicious activity
Implemented additional safeguards to our business processes and controls
An immediate temporary shut-down of our secure website for customers and financial professionals for the weekend of July 19 and 20
Implemented heightened security monitoring of the secure website
Added a high level of scrutiny, including enhanced analysis and authentication, for any transactions or account changes initiated since the incident
Implemented additional controls for payments and customer account changes
Engaged through counsel a leading cyber forensic consultant to assist in the investigation
Been in contact with the FBI regarding this incident
Changes made: Offer of two years of complimentary identity monitoring services to all affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

California State AGJul 25 · first

Iowa State AGJul 25 · first · this page

New Hampshire State AG+3d

Indiana State AG+7d

Delaware State AG+7d

Rhode Island State AG+46d

Montana State AG+66d

Maine State AG+67d

New Hampshire State AG+68d

California State AG+68d

Texas State AG+69d

Pattern: first filing Jul 25 (CA), last Oct 2 (TX) — a 69-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 16 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/7252025_Allianz_Life_Insurance_Comp_A7F3C4EF7F2CE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 25, 2025
Raw hash: a6f9f4984313c9eef2bfd4351a5658e0ccb0cdd2739a1b288fbdaf026b9dbcf4

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Victim entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Incidentdiscovered Jul 17, 2025

Stated responseTerminated access to accounts associated with the suspicious activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov