Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Hackers reportedly leaked data taken from Allianz Life after a July 16, 2025 intrusion into a cloud-based customer relationship management system used by the insurer. Reports linked the later leak to a wider Salesforce-targeting extortion campaign, but the evidence does not show that a known vulnerability in Salesforce’s core platform was exploited.
The reported files contained roughly 2.8 million records, while separate reporting identified approximately 1.1 million potentially affected people. Those figures are not interchangeable: records may include duplicates, business-partner entries, and multiple records for one person.
As an Amazon Associate I earn from qualifying purchases.
What happened to Allianz Life?
Allianz Life Insurance Company of North America said a malicious actor accessed a cloud-based system used by the company on July 16, 2025. The insurer said the information involved customers, financial professionals, selected employees, and other business partners.
In its initial incident notification, Allianz Life said it took steps to contain the incident and found no evidence at that time that its internal network or other company systems had been compromised.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Later state filings and reporting said exposed information could include names, addresses, phone numbers, email addresses, dates of birth, and Social Security or tax-identification numbers. The exact fields varied by record, so it would be inaccurate to assume every affected person had every type of information exposed.
What was leaked?
Security reporting described Allianz-related files containing Salesforce Accounts and Contacts records. The reported data included combinations of:
- Names and contact details
- Mailing addresses, phone numbers, and email addresses
- Dates of birth
- Customer, adviser, or business-relationship information
- Social Security or tax-identification numbers in at least some records, according to later reporting
TechRadar reported approximately 2.8 million leaked records. That is a file or record count, not proof that 2.8 million unique customers were affected. TechCrunch reported that Have I Been Pwned identified about 1.1 million affected individuals. Allianz’s customer population and the number of affected people should likewise not be treated as the same figure.
Recommended Free Tools
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Timeline of the incident
- July 16, 2025: An attacker accessed the cloud-based system used by Allianz Life.
- July 2025: Allianz Life disclosed the incident and began containment and notification efforts.
- Late July and early August: State filings and reporting added information about potentially exposed Social Security numbers and other data.
- August 2025: Files attributed to the Allianz incident were reportedly published or distributed as part of an extortion campaign.
- Afterward: Threat-intelligence reporting described the broader Salesforce-focused attack pattern and defensive measures.
Was Salesforce itself hacked?
“Salesforce was hacked” is an oversimplification. Allianz described the affected environment as a third-party cloud-based CRM system. Security researchers connected the incident to attacks against Salesforce customer environments, while Salesforce said its platform had not been compromised through a known vulnerability.
According to Salesforce’s security guidance, attackers manipulated employees or support personnel into providing credentials, MFA tokens, or authorization for a malicious connected application. That application could then use legitimate Salesforce permissions to read and export data.
This distinction matters. An attacker does not necessarily need to defeat Salesforce’s underlying infrastructure if a user account or connected application is granted excessive access. The incident is therefore best described as a breach involving a Salesforce-linked customer environment, not as confirmed proof that Salesforce’s core platform was penetrated.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How the reported attack worked
The campaign described by Salesforce and Google Threat Intelligence generally followed this pattern:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Credential or token theft: Attackers obtained credentials or MFA-related material through phishing or other social-engineering methods.
- Help-desk impersonation: They called employees while posing as IT support or another trusted internal function.
- Connected-app authorization: The target was directed to Salesforce’s connected-app process and persuaded to enter a code or approve an application.
- OAuth access: The malicious or disguised application received permission to access the organization’s Salesforce data.
- Bulk extraction: Attackers used Data Loader, APIs, or custom applications to collect CRM records.
- Extortion: They threatened publication or released samples and datasets to pressure victims.
Google Threat Intelligence tracked the activity under UNC6040 and the subsequent extortion activity under UNC6240. It also reported that some attackers later shifted from Data Loader to custom applications performing similar automated collection.
Who was behind the leak?
Security researchers and cybersecurity outlets associated the activity with actors using the ShinyHunters name. Reporting has also described overlap with the broader criminal ecosystem associated with Scattered Spider and Lapsus$.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
That is not the same as definitive forensic attribution. Allianz Life did not establish the attackers’ identity in its customer notice, and a criminal group’s claim or branding is not independent proof that one homogeneous group conducted every related intrusion. The careful description is that the Allianz leak was reported as part of a ShinyHunters-branded or Salesforce-focused extortion campaign.
Why the leak matters to customers
Personal information from an insurance or financial-services relationship can make follow-up fraud unusually convincing. Criminals may use accurate names, addresses, dates of birth, policy-related context, or adviser information to impersonate:
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute- Allianz Life employees
- Financial professionals or insurance agents
- Banks, brokerages, or retirement providers
- Government agencies or credit bureaus
Possible scams include requests to “verify” an identity, reset an account, move money, change a beneficiary, provide a one-time code, or upload identity documents. The biggest continuing risk may be secondary social engineering rather than direct access to the original CRM account.
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What Allianz Life customers should do
- Be suspicious of unexpected contact. Treat unsolicited calls, emails, and texts mentioning Allianz, insurance, investments, or account security as potential phishing or impersonation attempts.
- Do not disclose sensitive information. Never provide passwords, one-time codes, Social Security numbers, payment details, or identity documents in response to an unsolicited message.
- Verify independently. Contact Allianz Life using a phone number from a statement, insurance card, or the company’s official website. Do not use links or numbers supplied in a suspicious message.
- Review your breach notice. The notice you received is the best source for the data categories associated with your record and any remediation offered. Do not assume every customer received the same services.
- Consider a credit freeze. If Social Security or tax-identification information may have been exposed, a freeze with each major U.S. credit bureau can help block many new-credit applications.
- Check your credit reports. Use AnnualCreditReport.com to look for unfamiliar accounts, inquiries, addresses, or collection activity.
- Secure existing accounts. Change reused passwords, starting with email and financial accounts, and enable MFA—preferably with an authenticator app or security key where supported.
- Monitor beyond your credit file. Review insurance, banking, retirement, brokerage, and government-benefit accounts for unusual activity.
- Report identity theft. Use the FTC’s IdentityTheft.gov portal if you find evidence of misuse.
A credit freeze is useful but not complete protection. It does not prevent takeover of an existing account, fraudulent insurance claims, tax fraud, payment scams, or convincing phishing calls.
What Salesforce administrators should do
Organizations using Salesforce should treat this campaign as an authorization and identity-security problem as well as a vendor-security problem.
- Require MFA and review whether stronger phishing-resistant methods are available.
- Use least privilege for users, administrators, APIs, and integrations.
- Review connected applications, OAuth grants, refresh tokens, and recently authorized apps.
- Change connected-app settings from unrestricted self-authorization to administrator approval where appropriate.
- Restrict Data Loader and bulk API permissions to users who genuinely need them.
- Review login history, API activity, large exports, and unusual access from new locations or devices.
- Use trusted-IP and login-IP controls where they fit the organization’s operating model.
- Consider Salesforce Shield capabilities for event monitoring and transaction security.
Salesforce’s connected-app administration guidance explains how administrators can require approval and assign access through profiles or permission sets. Salesforce’s public position on the campaign is available through its security advisory.
What remains uncertain
Several details should remain qualified:
- The exact number of unique people affected is different from the number of leaked records.
- Not every reported file or field has necessarily been independently verified as complete and authentic.
- The full access path into Allianz Life’s environment has not been publicly established in the supplied sources.
- Attribution to ShinyHunters or overlapping criminal groups is not the same as an official forensic finding by Allianz Life.
- It is not known that every data set attributed to Allianz came from one identical intrusion or source.
The most accurate summary is that hackers reportedly stole data from an Allianz Life cloud CRM environment during a July 16, 2025 intrusion and later leaked files associated with that incident. The campaign used social engineering and authorized Salesforce functionality, according to Salesforce and threat-intelligence reporting; it was not publicly established as an attack exploiting a known Salesforce platform vulnerability.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
