Insurance giant Allianz Life has confirmed suffering a cyberattack which saw it lose sensitive data on the “majority” of its customers, with over a million people at risk. The North American insurance giant said the attack happened on July 16, 2025, when a threat actor accessed a third-party, cloud-based CRM system the company uses.

Allianz Life said in a statement that it took “immediate action” to mitigate the damage and notified the FBI shortly after discovering the breach. The company added that the intrusion was confined to the external CRM system and did not spread to its internal policy management infrastructure.

A majority of Allianz Life's 1.4 million US customers had their personal data stolen in cyber-attack. Here's what you need to know.