Breach, Data Security, Cloud Security

Massive data breach confirmed by Allianz Life

Allianz Insurance has been a leader in fostering a DevSecOps culture. Today’s columnist, Matias Madou of Secure Code Warrior, offers advice on how to bring the AppSec and DevOps teams together to create a collaborative DevSecOps approach.

U.S. life insurance firm Allianz Life had most of its 1.4 million customers' data compromised following a data breach this month, reports BleepingComputer.

Infiltration of Allianz Life's third-party cloud-based customer relationship management system on July 16 allowed the theft of personal data belonging to clients, financial professionals, and certain employees, according to an Allianz Life spokesperson, who emphasized the intrusion to be contained within the company alone. "Based on our investigation to-date, there is no evidence the Allianz Life network or other company systems were accessed, including our policy administration system," the spokesperson added. Other information regarding the perpetrator of the attack was not provided but the ShinyHunters hacking operation, which had attacked Snowflake and PowerSchool, has been suspected to being behind the Allianz Life hack. ShinyHunters was recently reported by Mandiant to have commenced social engineering attacks against Salesforce CRM clients that also involved data extortion. However, Allianz Life neither confirmed nor denied whether Salesforce is its CRM provider.

An In-Depth Guide to Cloud Security

Get essential knowledge and practical strategies to fortify your cloud security.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds