Social EngineeringIdentity (basic)Government IDMediumActive

ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

bd_c46349c3bbe0c405 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 17, 2025

Filed

Sep 9, 2025

To disclose

8 weeks

Affected

Not disclosed

Linked

17 filings

Confidence

65%

Full breach record for ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA →10 incidents on file

Allianz Life Insurance Company of North America (AZLNA) notified the Rhode Island Attorney General on July 23, 2025, of a cybersecurity incident involving a third-party cloud-based CRM system. On July 16, 2025, a threat actor gained unauthorized access using social engineering, obtaining customer and employee PII including names, addresses, DOBs, and SSNs. AZLNA terminated access, engaged forensic consultants, and notified the FBI. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 8 weeks / 53 days

Jul 16, 2025

Begins

Jul 17, 2025

Discovered

Sep 9, 2025

Filed

This filing is one of 17 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Montana State AGbd_750c673287c1a6742025-09-29 · +20dVerified
Maine State AGbd_954aeb2a87d1be622025-09-30 · +21dVerified
New Hampshire State AGShinyHuntersbd_1d2130d2e025ff0d2025-10-01 · +22dVerified
California State AGbd_ae285894329d7b872025-10-01 · +22dVerified

Show 6 more filings ↓up to 46d gap

Texas State AGbd_dfe5c0e3ff33260b2025-10-02 · +23dVerified
Indiana State AGbd_20e97e50104a5ef62025-08-01 · +39dVerified
Delaware State AGbd_a31bcd7491a132a42025-08-01 · +39dVerified
New Hampshire State AGbd_e0ee904e6837e8712025-07-28 · +43dVerified
Iowa State AGbd_1ed5a4cf2445eb002025-07-25 · +46dCandidate
California State AGbd_5bf86c9deb891d4a2025-07-25 · +46dVerified

Showing first 10 of 16 linked disclosures.

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america

Discovered: Jul 17, 2025
Breach occurred: Jul 16, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: contacted the FBI regarding this incident
Initial access: phishing_link

During the incident: Terminated access to accounts associated with the suspicious activity
Implemented additional safeguards to our business processes and controls
Immediate temporary shut-down of our secure website for customers and financial professionals for the weekend of July 19 and 20
Implemented heightened security monitoring of the secure website
Added a high level of scrutiny, including enhanced analysis and authentication, for any transactions or account changes initiated since the incident
Implemented additional controls for payments and customer account changes
Engaged through counsel a leading cyber forensic consultant to assist in the investigation
Been in contact with the FBI regarding this incident
Changes made: Implemented additional safeguards to our business processes and controls
Implemented heightened security monitoring of the secure website
Added a high level of scrutiny, including enhanced analysis and authentication, for any transactions or account changes initiated since the incident
Implemented additional controls for payments and customer account changes
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Iowa State AGJul 25 · first

California State AGJul 25 · first

New Hampshire State AG+3d

Indiana State AG+7d

Delaware State AG+7d

Rhode Island State AG+46d · this page

Montana State AG+66d

Maine State AG+67d

New Hampshire State AG+68d

California State AG+68d

Texas State AG+69d

Pattern: first filing Jul 25 (IA), last Oct 2 (TX) — a 69-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 16 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://riag.ri.gov/media/7541/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 9, 2025
Raw hash: e7b403150fd78a6964d4e9b6fdec3c7c95369bf0bfe1a531de8af5f018d24f7f

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Victim entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Incidentdiscovered Jul 17, 2025

Stated responseTerminated access to accounts associated with the suspicious activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceriag.ri.gov