HackingFinancial ServicesFinanceStolen CredentialsPhishingData ExfiltratedTargetedIdentity (basic)Government IDHighContained

ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

bd_c095847229c1cf53 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 17, 2025

Filed

Jul 25, 2025

To disclose

8 days

Affected

22,983state residents only

Linked

17 filings

Confidence

70%

Full breach record for ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA →10 incidents on file

Allianz Life Insurance Company of North America reported a cyberattack on July 17, 2025, affecting a third-party cloud-based CRM system. A threat actor gained unauthorized access via social engineering/phishing on July 16, 2025, exfiltrating names, addresses, DOBs, and SSNs from approximately 22,983 Washington residents. Allianz terminated access, engaged forensic consultants, notified the FBI, and offered two years of identity monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d8 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 8 days

Jul 16, 2025

Begins

Jul 17, 2025

Discovered

Jul 25, 2025

Filed

vs. sector median

7 wks faster

This filing is one of 17 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Iowa State AGbd_1ed5a4cf2445eb002025-07-25Candidate
New Hampshire State AGbd_e0ee904e6837e8712025-07-28 · +3dVerified
Indiana State AGbd_20e97e50104a5ef62025-08-01 · +7dVerified
Delaware State AGbd_a31bcd7491a132a42025-08-01 · +7dVerified

Show 6 more filings ↓up to 69d gap

Rhode Island State AGbd_c46349c3bbe0c4052025-09-09 · +46dVerified
Montana State AGbd_750c673287c1a6742025-09-29 · +66dVerified
Maine State AGbd_954aeb2a87d1be622025-09-30 · +67dVerified
New Hampshire State AGShinyHuntersbd_1d2130d2e025ff0d2025-10-01 · +68dVerified
California State AGbd_ae285894329d7b872025-10-01 · +68dVerified
Texas State AGbd_dfe5c0e3ff33260b2025-10-02 · +69dVerified

Showing first 10 of 16 linked disclosures.

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america
Domain: allianzlife.com
Industry: Finance

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america
Domain: allianzlife.com
Industry: Finance
Industry: Financial Servicesllm

Discovered: Jul 17, 2025
Breach occurred: Jul 16, 2025 – Jul 17, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 25, 2025
Affected individuals: 22,983state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified FBINotified Washington State Office of the Attorney General
Initial access: phishing_link

During the incident: Terminated access to accounts associated with the suspicious activity
Engaged a leading cyber forensic consultant to assist in the investigation
In contact with the FBI regarding this incident
Implemented additional safeguards to business processes and controls
Shut down secure website for customers and financial professionals
Implemented heightened security monitoring of the secure website
Added high level of scrutiny for transactions or account changes
Implemented additional controls for payments and customer account changes
Changes made: Implemented additional safeguards to business processes and controls
Implemented heightened security monitoring of the secure website
Added high level of scrutiny, including enhanced analysis and authentication, for any transactions or account changes
Implemented additional controls for payments and customer account changes
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 days(8 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Iowa State AGJul 25 · first

Washington State AGJul 25 · first · this page

New Hampshire State AG+3d

Indiana State AG+7d

Delaware State AG+7d

Rhode Island State AG+46d

Montana State AG+66d

Maine State AG+67d

New Hampshire State AG+68d

California State AG+68d

Texas State AG+69d

Pattern: first filing Jul 25 (IA), last Oct 2 (TX) — a 69-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 16 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA34119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 25, 2025
Raw hash: 0d5d1940fb38a04c2e0e468ab9327ad8afcc08702bddf31c7e4176e637e5bce6

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Victim entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Incidentdiscovered Jul 17, 2025

Stated responseTerminated access to accounts associated with the suspicious activity

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com