Allianz subsidiary Life: Data from the burglary now at Have-I-Been-Pwned

There was a major data theft at the US subsidiary Allianz Life of Allianz Insurance in July. Cybercriminals stole a database containing customers' personal data. Now the data has also ended up in the Have-I-Been-Pwned Project (HIBP). Here, interested parties can check whether their data was included in this data leak.

The breach took place last month; Allianz estimates it to be July 16 of this year. A company spokesperson said that it involved a database with information about customers. According to him, the attackers could have used social engineering technology to access personal data of "most Allianz Life customers, financial professionals and selected Allianz Life employees".

Troy Hunt, who runs HIBP, attributes the data leak to current attacks on Salesforce. He writes that the attackers were able to access 1.1 million individual email addresses, names, genders, dates of birth, phone numbers and addresses. On the main page of HIBP, interested parties can check in which data leaks their e-mail address has appeared.

German customers probably not affected

At the end of July, Allianz Life did not provide any information on how many customers were affected by the data leak – Hunt's HIBP has now clarified this. As Allianz Life only offers its products in the USA, it is unlikely that any German customers are affected. However, the company claims to have 1.4 million customers in the USA – it remains unclear where the difference to the 1.1 million copied data records comes from.

Allianz Life has called in the relevant authorities in the USA and is cooperating with FBI prosecutors. However, the company did not say whether the attackers had demanded a ransom.

Read also

Have I Been Pwned 2.0: More speed & confetti

(dmk)