Aflac faces class action lawsuit for data breach impacting customer information

A class-action lawsuit has been filed against Aflac Inc. in response to a data breach that compromised policyholders’ personal information. The lawsuit, filed by an Alabama law firm, alleges that Aflac knew of the risks of a cyber attack but failed to adequately protect customer data, as reported in a complaint on behalf of lead plaintiff Martha Graham.

The lawsuit was promptly filed after Aflac disclosed the cybersecurity incident, which is believed to be part of a larger hack orchestrated by a group known as Scattered Spider targeting multiple insurance companies. The complaint emphasizes the negligent handling of the breach by Aflac, accusing the company of withholding crucial information from affected policyholders and failing to promptly notify them.

The legal action is spearheaded by the Beasley, Allen law firm, based in Montgomery, Alabama, and highlights the importance of timely and transparent communication from companies following data security incidents. Aflac is headquartered in Columbus, Georgia, where the lawsuit was filed in federal court. The plaintiffs seek compensatory and punitive damages due to the potential misuse of their personal information for criminal activities like identity theft, loan applications, and fraudulent schemes.

In response to the lawsuit, Aflac has not issued a formal statement addressing the claims made against the company. However, the insurer is offering affected customers free credit monitoring, identity theft protection, and other safeguards for a period of 24 months. The lawsuit also outlines the security measures recommended by the federal government and Microsoft’s Threat Protection Intelligence Team, measures that Aflac allegedly failed to implement effectively.

This legal action is among the many class-action lawsuits that have been filed in recent years against companies experiencing data breaches. The overarching theme in these cases is the assertion that companies should have prioritized customer data protection to prevent such breaches from occurring. The legal complaint and recommendations for heightened security measures can be accessed by interested parties seeking more information on the lawsuit.