Allianz Life Insurance Sued Over Data Breach

Case Overview: A class action lawsuit claims Allianz Life Insurance Company of North America failed to protect sensitive customer data, leading to a July 2025 data breach that exposed the personal information of approximately 1.4 million people.

Consumers Affected: U.S. customers whose personal information was compromised in the Allianz data breach.

Court: U.S. District Court for the District of Minnesota

Allianz Life Insurance Company of North America failed to protect sensitive customer data which led to a July 2025 data breach that allegedly compromised the personal information of approximately 1.4 million people, multiple class action lawsuits allege.

Two separate lawsuits, one filed July 31 and another August 1 in Minnesota federal court, claim Allianz’s inadequate security allowed hackers to access personal information stored in a third-party, cloud-based customer management system. 

The exposed data reportedly includes names, addresses, Social Security numbers, financial account information, and even health details.

Customers Say the Fallout Has Been Stressful And Costly

Sylvia Herrera of California, Cheryl Marotta of Massachusetts, and David Werner of Missouri, who filed the lawsuits, are all Allianz policyholders. They claim the breach has caused financial strain and emotional distress. 

Marotta says she received strange emails indicating her credit card would be charged, while Werner reportedly spent hours monitoring his accounts and dealing with a flood of spam.

Herrera’s complaint says Allianz failed to provide timely notice to affected individuals, leaving them exposed to the risk of identity theft for days before the company acknowledged the breach. 

All three plaintiffs argue that Allianz had a duty to protect their personal data and that it fell short by using weak safeguards and failing to encrypt the information properly.

Security Breakdown Allegedly Was Preventable

The lawsuits describe how, on or around July 16, 2025, a cyberattacker gained unauthorized access to Allianz’s systems through social engineering. Allianz disclosed the incident to regulators 10 days later, but the plaintiffs say the company should have done more to prevent the breach and respond faster once it occurred.

The filings accuse Allianz of violating its own privacy policies, industry standards like the NIST Cybersecurity Framework, and federal law. The complaints say the company didn’t monitor its systems closely enough, didn’t respond quickly to the attack, and didn’t have a strong data security plan in place.

Insurance Providers Face Growing Number of Data Breach Cases

Allianz joins a growing list of companies facing lawsuits over recent data breaches. Victoria’s Secret is being sued after a May 2025 breach allegedly exposed customers' personal information due to poor cybersecurity practices. 

In New Jersey, Cooper University Health Care faces claims it failed to notify over 57,000 patients for nearly a year after discovering a breach. Globe Life, another insurance provider, is also dealing with litigation over a breach affecting more than 850,000 customers earlier this year.

The Allianz plaintiffs are seeking to represent a nationwide class of individuals affected by the July breach. They are asking for damages, restitution, and court orders requiring Allianz to improve its cybersecurity practices. 

That includes better data encryption, annual independent audits, and free credit monitoring for those impacted. At its core, the lawsuit is about holding Allianz accountable and preventing another breach from putting customers at risk.

Case Details

• Lawsuit: Herrera v. Allianz Life Insurance Company of North America
• Court: U.S. District Court for the District of Minnesota

Do you have insurance through Allianz? Let us know your thoughts about its security practices in the comments below.