Aflac targeted in cyberattacks on US insurance industry

ck on Erie Insurance, first reported on June 8, and an attack on the insurance arm of Swedish manufacturer Scania, reported on June 16.

According to Chris Gray, Field CTO at Deepwatch, these attacks on insurance companies are a continuation of previous cyber assaults on the industry, as well as on retail establishments. Gray emphasized the need to approach these incidents as evolving threats that require constant vigilance and adaptability. He mentioned that attackers are unlikely to stick to the same methods, necessitating security teams to be proactive in their approach.

Moreover, Gray pointed out that the recent attacks indicate a shift towards exploiting the vulnerabilities of individuals within organizations. He highlighted the importance of employee training and awareness, stating that even a 70% score on an anti-phishing test is insufficient, as any degree of failure can compromise sensitive information and lead to potential breaches.

Ted Miracco, CEO at Approov, commended Aflac for its rapid response and transparency in disclosing the breach. He noted the trend of cybercriminals using social engineering tactics to breach networks in the insurance and financial services sector, often leveraging advanced AI techniques. Miracco stressed the critical need for a multi-layered security approach, especially in mobile-centric environments, to combat phishing attacks and secure sensitive data effectively.

The wave of cyberattacks on insurance companies underscores the growing threat landscape faced by organizations across various industries. These incidents highlight the need for continuous monitoring, adaptive security measures, and robust cybersecurity protocols to safeguard against evolving cyber threats.

In conclusion, the recent cyberattacks targeting U.S. insurance companies, including Aflac, serve as a stark reminder of the persistent risks posed by cybercriminals. Organizations must stay vigilant, adopt a proactive security posture, and prioritize employee training to mitigate the impact of potential breaches and safeguard sensitive data effectively. With cybersecurity threats on the rise, implementing comprehensive security measures and fostering a culture of cyber awareness are essential steps in fortifying defenses against emerging cyber threats.