Allianz Life Insurance Company of North America has confirmed a significant data breach affecting the majority of its 1.4 million U.S. customers. The incident, which occurred on July 16, involved unauthorized access to a third-party cloud-based system utilized by the company.

According to reliable sources, the breach was orchestrated by what Allianz Life describes as a “malicious threat actor” employing social engineering techniques. The company reports that personal identifiable information of customers, financial professionals, and select employees was compromised. It is important to note that Allianz Life’s internal systems were reportedly not accessed during this breach.

Allianz Life, headquartered in Minneapolis and a subsidiary of the German-based Allianz SE, has initiated contact with affected individuals and notified the Federal Bureau of Investigation. The company has also filed reports with other relevant authorities, including the Maine Attorney General’s Office.

Allianz Life has stated that it will offer 24 months of identity theft protection and credit monitoring to those affected. This raises important questions about the security of third-party systems used by major financial institutions and the potential long-term implications for consumers.

This incident involves only the U.S. operations of Allianz Life and does not affect other Allianz corporate entities. The company, which employs nearly 2,000 people in the United States, is part of a global financial services group serving over 125 million customers worldwide.

As the investigation continues, many questions remain unanswered. The exact nature of the social engineering technique used, the specific types of data compromised, and the potential long-term impact on affected individuals are yet to be fully determined. The public’s right to information on this matter remains paramount as the situation develops.