Social Engineering Breaches Exposed Customer Data at Figure and Allianz Life

Figure and Allianz Life disclosed separate breaches in which attackers used social engineering to gain access to systems holding large volumes of customer data. Figure said an employee was deceived into granting access, leading to the public posting of a dataset from January 2026 that contained more than 900,000 unique email addresses as well as names, phone numbers, physical addresses, and dates of birth.

Allianz Life reported that a cyberattack in July 2025 targeted data stored on Salesforce and was later followed by the online leak of 1.1 million unique email addresses. The exposed Allianz Life records also included names, genders, dates of birth, phone numbers, and physical addresses, underscoring how social engineering attacks continue to drive large-scale exposure of sensitive personal information across financial services firms.