Aflac warns of potential customer data exposure in cyberattack

Recently, Aflac announced that a cyberattack targeted its customers, resulting in the theft of their data. Although specific details are limited, the company stated that the incident was the work of a sophisticated cybercrime group known for targeting the insurance sector. According to a mandatory SEC filing, hackers infiltrated Aflac’s network on June 12, prompting the company to activate its cybersecurity response protocols to contain the intrusion swiftly.

The compromised information may include sensitive data such as health records, social security numbers, and personal details. Notably, Aflac confirmed that their systems were not affected by ransomware, a relief given the increasing prevalence of ransomware attacks in other cyber breaches. Aflac is diligently scrutinizing potentially impacted files and has not yet determined the total number of individuals affected by the breach, emphasizing the significance of conducting a thorough review.

In a press release issued on Friday, Aflac disclosed that the hackers exploited social engineering tactics to gain unauthorized entry, a frequently used technique in significant cybersecurity breaches. The company is actively investigating the breach and its implications for their customers, employees, and associated parties. Aflac recommended that individuals who suspect they may be affected by the breach reach out to the company to avail of complimentary credit monitoring and identity theft protection services.

The statement in the press release noted, “This attack, like many insurance companies are currently experiencing, was caused by a sophisticated cybercrime group. This was part of a cybercrime campaign against the insurance industry…The potentially impacted files contain claims information, health information, social security numbers, and/or other personal information, related to customers, beneficiaries, employees, agents, and other individuals in our U.S. business.” The tone of urgency and concern was evident in Aflac’s response to the breach.

Sources indicate that the nature of the attack aligns with the modus operandi of the group Scattered Spider, which has been linked to recent cyber incidents at Philadelphia Insurance Companies (PHLY) and Erie Indemnity. Aflac is not the first to fall victim to the tactics of this cybercrime group, underscoring the pervasive threat they pose to organizations within the insurance sector.

In conclusion, cybersecurity remains a pressing concern for companies across various industries, with the insurance sector being a prime target for sophisticated cybercrime groups. Aflac’s proactive response to the breach and commitment to safeguarding the affected individuals highlight the importance of robust cybersecurity measures in today’s digital landscape. It serves as a poignant reminder of the ongoing battle against cyber threats and the need for continuous vigilance to protect sensitive information from malicious actors.