Social EngineeringFinancial ServicesHealthcareFinancePhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainIdentity (basic)Government IDPIIMediumActive

ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

bd_e0ee904e6837e871 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 17, 2025

Filed

Jul 28, 2025

To disclose

11 days

Affected

Not disclosed

Linked

17 filings

Confidence

64%

Full breach record for ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA →10 incidents on file

Allianz Life Insurance Company of North America (AZLNA) reported a data security event where a threat actor gained unauthorized access to a third-party cloud-based CRM system via social engineering on July 16, 2025. AZLNA detected suspicious activity on July 17, 2025, and terminated access. The incident potentially exposed customer and employee PII, including names, addresses, DOBs, and SSNs. AZLNA engaged forensic consultants and notified the FBI. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 10 days

Jul 16, 2025

Begins

Jul 17, 2025

Discovered

Jul 28, 2025

Filed

vs. sector median

7 wks faster

This filing is one of 17 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Iowa State AGbd_1ed5a4cf2445eb002025-07-25 · +3dCandidate
California State AGbd_5bf86c9deb891d4a2025-07-25 · +3dVerified
Indiana State AGbd_20e97e50104a5ef62025-08-01 · +4dVerified
Delaware State AGbd_a31bcd7491a132a42025-08-01 · +4dVerified

Show 6 more filings ↓up to 66d gap

Rhode Island State AGbd_c46349c3bbe0c4052025-09-09 · +43dVerified
Montana State AGbd_750c673287c1a6742025-09-29 · +63dVerified
Maine State AGbd_954aeb2a87d1be622025-09-30 · +64dVerified
New Hampshire State AGShinyHuntersbd_1d2130d2e025ff0d2025-10-01 · +65dVerified
California State AGbd_ae285894329d7b872025-10-01 · +65dVerified
Texas State AGbd_dfe5c0e3ff33260b2025-10-02 · +66dVerified

Showing first 10 of 16 linked disclosures.

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america

Name: ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA
norm: allianz life insurance company of north america
Industry: Financial ServicesllmHealthcarellm

Discovered: Jul 17, 2025
Breach occurred: Jul 16, 2025 – Jul 17, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDPII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Contacted the FBI regarding this incident
Initial access: phishing_link

During the incident: Terminated access to accounts associated with the suspicious activity
Implemented additional safeguards to our business processes and controls
An immediate temporary shut-down of our secure website for customers and financial professionals for the weekend of July 19 and 20
Implemented heightened security monitoring of the secure website
Added a high level of scrutiny, including enhanced analysis and authentication, for any transactions or account changes initiated since the incident
Implemented additional controls for payments and customer account changes
Engaged through counsel a leading cyber forensic consultant to assist in the investigation
Been in contact with the FBI regarding this incident
Changes made: Implemented additional safeguards to our business processes and controls
Implemented heightened security monitoring of the secure website
Added a high level of scrutiny, including enhanced analysis and authentication, for any transactions or account changes initiated since the incident
Implemented additional controls for payments and customer account changes
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Iowa State AGJul 25 · first

California State AGJul 25 · first

New Hampshire State AG+3d · this page

Indiana State AG+7d

Delaware State AG+7d

Rhode Island State AG+46d

Montana State AG+66d

Maine State AG+67d

New Hampshire State AG+68d

California State AG+68d

Texas State AG+69d

Pattern: first filing Jul 25 (IA), last Oct 2 (TX) — a 69-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 16 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/allianz-life-insurance-company-north-america-20250728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 28, 2025
Raw hash: 27b040dac963a54a378ef0130c57ad3fdecb11367a12ca0b1add9adc790a6b2b

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Victim entityALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA

Incidentdiscovered Jul 17, 2025

Stated responseTerminated access to accounts associated with the suspicious activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov