Aflac Incorporated, the top provider of supplemental health insurance in the United States, has reported a significant cyber attack on its U.S. network. The company detected suspicious activity on June 12 and immediately initiated its cyber incident response protocols to halt the intrusion.
According to Aflac’s press release, the attack was part of a broader cybercrime campaign targeting the insurance industry. The company has engaged leading third-party cybersecurity experts to support its response to the incident. Preliminary findings indicate that the unauthorized party used social engineering tactics to gain access to Aflac’s network.
Aflac has begun a thorough review of potentially impacted files to determine the scope of the breach. While the total number of affected individuals remains unclear until the review is completed, potentially compromised files may contain sensitive information such as claims data, health information, social security numbers, and other personal details related to customers, beneficiaries, employees, agents, and other U.S.-based individuals.
In response to the incident, Aflac is offering free credit monitoring and identity theft protection, including Medical Shield, for 24 months to potentially affected individuals. Those impacted can access this service by calling a dedicated call center at 1-855-361-0305.
Aflac has expressed regret over the incident and is committed to keeping stakeholders informed as the investigation progresses. The company is working diligently to understand the full extent of the breach and to prevent future incidents.
This cyber attack on Aflac highlights the growing threat of cybercrime campaigns against major corporations, particularly in the insurance industry. As investigations continue, the incident serves as a reminder of the importance of robust cybersecurity measures and the need for transparency in the event of a data breach.