Insurance Giant Aflac Breached in Sophisticated Cyberattack
Insurance company Aflac reported a significant cyberattack that potentially compromised sensitive customer information, including Social Security numbers, insurance claims, and health data. The breach, attributed to the notorious cybercrime group Scattered Spider, comes amid a wave of similar attacks on the US insurance industry.
Aflac, a major provider of supplemental health insurance in the US, revealed that the hackers used “social engineering” tactics to gain access to their network. The company stated that it “stopped the intrusion within hours” after discovering it and that no ransomware was deployed. However, the full extent of the data stolen remains unclear.
This attack is consistent with the methods used by Scattered Spider, a group known for targeting large corporations through tactics like posing as tech support. The group’s activities have raised concerns among cybersecurity experts due to their aggressive extortion methods and rapid execution of attacks.
Scattered Spider gained notoriety in September 2023 after being linked to multimillion-dollar hacks on Las Vegas casinos and hotels, including MGM Resorts and Caesars Entertainment. Cybersecurity experts warn that the group’s ability to execute full attacks within hours makes them particularly dangerous.
“If Scattered Spider is targeting your industry, get help immediately,” warned Cynthia Kaiser, former deputy assistant director of the FBI’s Cyber Division. “They can execute their full attacks in hours. Most other ransomware groups take days.”
The breach at Aflac is part of a larger trend affecting the insurance industry. Other companies, such as Erie Insurance and Philadelphia Insurance Companies, have also reported hacks this month, resulting in significant disruptions to their IT systems.
As the investigation continues, Aflac assures that it continues to serve its customers without interruption. The company is working to determine the full extent of the potential exposure, which could be vast given its tens of millions of customers and billions of dollars in annual revenue.
