Allianz Life Data Breach Lawsuit
1,497,036 people, a breach on 16 July 2025, and litigation that is still very much open — there is no settlement to claim from yet.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Happened
On 16 July 2025 an attacker reached a third-party, cloud-based system used by Allianz Life Insurance Company of North America. In its filing with the Maine Attorney General, Allianz Life put the number of people affected at 1,497,036 — customers, the financial professionals who work with them, and part of its own workforce. The route in was not a software flaw. As the federal panel that reviewed this and related cases described it, the attackers used social engineering against the customer's own database rather than exploiting the platform underneath, which is why the case is about what Allianz Life did to guard the door, not about the vendor.
Case Details
United States District Court for the District of Minnesota. Every action there has been placed before a single judge, and the consolidated matter is captioned In re Allianz Life Insurance Company of North America Data Incident Litigation, No. 0:25-cv-02777. New complaints were still being filed in February 2026.
Where the Case Stands
Who Is Covered
People whose personal information was in the affected system as of 16 July 2025 — which by Allianz Life's own count means about 1.5 million customers, financial professionals and employees. The clearest sign is the notification letter: companies send those to a defined list, so receiving one is close to confirmation that you are in the group. If you believe you were affected but never got a letter, that is worth raising, because address changes and forwarding failures are common.
What a Case Like This Pays
Timeline
- 1
16 July 2025 — the breach
An attacker reaches a third-party cloud system holding Allianz Life customer data.
- 2
Late July 2025 — disclosure
Allianz Life discloses the incident and begins regulatory notifications.
- 3
From August 2025 — first lawsuits
Proposed class actions are filed in Minnesota federal court, where Allianz Life is headquartered.
- 4
September 2025 — the panel is asked to consolidate
Plaintiffs move to combine dozens of cases against several companies into one Salesforce-wide proceeding. Allianz Life opposes.
- 5
16 December 2025 — no combined proceeding
The panel refuses to create a Salesforce MDL, noting that each breach was distinct and that a Minnesota hub for Allianz Life had already formed on its own.
- 6
Into 2026 — the case continues
New complaints are still being filed as late as February 2026. No settlement has been reached.
Three Things That Are Not the Lawsuit
A breach notification list is also a target list. These three are worth recognising.
A “claim form” for a case that has not settled
There is no settlement in the Allianz Life matter, which means there is no claim form, no claims administrator and no deadline. Any site or letter inviting you to file a claim and asking for a fee, your Social Security number or your bank details is not connected to this litigation. Joining a class action never costs money up front.
Callers who already “have your file”
Because the notification letters went to a known list of people, that list is valuable to callers who pretend to be from the company, a law firm or a regulator. A real firm will not cold-call demanding a payment or an account number to “release” compensation. Hang up and call back on a number you looked up yourself.
Credit monitoring you are asked to pay for
Where a company offers monitoring after a breach, it pays for it. If someone bills you for monitoring “because of the breach”, that is not the company's offer. Separately, a security freeze at each of the three bureaus is free by federal law and does more than monitoring does, because it blocks new accounts instead of reporting them afterwards.
Frequently Asked Questions
How many people were affected?
1,497,036, according to Allianz Life's own notification to the Maine Attorney General. The figure covers customers, the independent financial professionals who work with them, and a portion of Allianz Life's employees — which is why some people who never held a policy still received a letter.
Is this the same as the Allianz SE cases in the news?
No, and the names are close enough to cause real confusion. This is Allianz Life Insurance Company of North America, a US insurer, and the case is about a July 2025 data breach in Minnesota federal court. It is unrelated to securities litigation involving the German parent group, and unrelated to a settlement involving American Income Life, whose abbreviation and settlement website look similar at a glance.
Which court is my case in?
The District of Minnesota. All the Allianz Life actions there have been assigned to one judge under In re Allianz Life Insurance Company of North America Data Incident Litigation, 0:25-cv-02777. That happened on its own rather than by order of the multidistrict panel, which declined to build a larger combined proceeding.
Is there a settlement I can claim from?
No. As of August 2026 there is no settlement in the Allianz Life litigation, no claims administrator and no deadline. Anything presenting itself as a claim form for this case is not what it says it is.
Does joining cost me anything?
No. Data breach class actions are handled on contingency: the firms are paid out of a settlement or judgment if there is one, and nothing if there is not. You are never asked for money up front, and anyone who does ask is not a class action lawyer.
What should I do right now, regardless of the lawsuit?
Freeze your credit at all three bureaus — it is free, takes about ten minutes each, and blocks new accounts rather than just reporting them after the fact. Keep the notification letter: it is the simplest proof that you are in the affected group. And write down any costs you incur, because documented losses are the part of a breach claim that pays the most.
How long do these cases take?
Longer than people expect. A data breach class action that settles typically takes two to four years from the first complaint to money reaching class members, and the steps in between — motions to dismiss, class certification, appeals — can each add a year. There is no shortcut, and a case moving slowly is not a sign that it is going badly.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.