HackingFinancial ServicesFinanceCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

Allianz Global Risks U.S. Insurance Company

bd_246aa92e07f1db8f · schema v1 · pii pii-v1

Severity

High

Discovered

May 31, 2023

Filed

May 10, 2024

To disclose

49 weeks

Affected · nationwide

44,11451 in this filing

Linked

6 filings

Confidence

66%

Full breach record for Allianz Global Risks U.S. Insurance Company →

Allianz Global Risks U.S. Insurance Company reported an external system breach (hacking) on May 31, 2023, affecting 44,114 individuals, including 51 Maine residents. The breach compromised names and Social Security Numbers. Written notifications were sent on November 20, 2023, offering 24 months of credit monitoring and identity theft restoration services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 31, 2023 → Filed with AG May 10, 2024345d ⏱ ME AG >30d49 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 49 weeks / 345 days

May 31, 2023

Begins

May 31, 2023

Discovered

May 10, 2024

Filed

vs. sector median

+41 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_bc2af957499dfb662024-05-10Verified
Montana State AGCL0Pbd_e51b8ecd695ec3e82024-05-09 · +1dVerified
New Hampshire State AGbd_99d688a6c19da6dd2024-05-17 · +7dVerified
Illinois State AGbd_4473e8e880815b892024-05-01 · +9dVerified

Show 1 more filing ↓up to 172d gap

Indiana State AGbd_4a68cdfbc3acb3c62023-11-20 · +172dCandidate

Name: Allianz Global Risks U.S. Insurance Company
norm: allianz global risks us insurance

Name: Allianz Global Risks U.S. Insurance Company
norm: allianz global risks us insurance
Industry: Financial Servicesllm

Discovered: May 31, 2023
Breach occurred: May 31, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 20, 2023
Affected individuals: 44,114state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed data breach notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Sent written notification to affected individuals
Offered 24 months of credit monitoring and identity theft restoration services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 49 weeks(345 days from discovery to filing)
Compliance flags: ME AG >30d · 345dME resident >60d · 173d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 31, 2023
→ Filed with AG: May 10, 2024
345d 30 days (soft) ME AG >30d
Maine
Discovered: May 31, 2023
→ Notified: Nov 20, 2023
173d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 31, 2023 → Filed with AG: May 10, 2024	345d	30 days (soft)	ME AG >30d
Maine	Discovered: May 31, 2023 → Notified: Nov 20, 2023	173d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGNov 20 · first

Illinois State AG+163d

Montana State AG+171d

Massachusetts State AG+172d

Maine State AG+172d · this page

New Hampshire State AG+179d

Pattern: first filing Nov 20 (IN), last May 17 (NH) — a 179-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1fb76a15-26a3-4f3f-8572-1b24c2237dca.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 10, 2024
Raw hash: e3750214de66266d25fd6306636669cd0b7124d21a6f6d8570c67801a8e5bb4c

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityAllianz Global Risks U.S. Insurance Company

Victim entityAllianz Global Risks U.S. Insurance Company

Incidentdiscovered May 31, 2023

Stated responseSent written notification to affected individuals

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov