Insurance Giant Aflac Hit by Cyberattack, Potentially Exposing Customer Data
Aflac, a major insurance provider, has confirmed a cyberattack on its systems that may have compromised sensitive customer information, including Social Security numbers, insurance claims, and health data. The breach, detected last week, is attributed to a sophisticated cybercrime group, although the company hasn’t disclosed the group’s identity.
The company claims to have stopped the intrusion within hours and asserts that no ransomware was deployed. Aflac reassures customers that it continues to operate normally, but the full extent of the potential data exposure remains unclear. The breach is believed to be the work of Scattered Spider, a notorious cybercrime group known for its aggressive tactics and ability to infiltrate large corporations through social engineering.
This incident marks one of the most significant breaches in the US insurance sector recently, following similar attacks on Erie Insurance and Philadelphia Insurance Companies. Cybersecurity experts are warning companies in the industry to be vigilant against suspicious phone calls and other potential attack vectors used by Scattered Spider.
“If Scattered Spider is targeting your industry, get help immediately,” warned Cynthia Kaiser, former deputy assistant director of the FBI’s Cyber Division. “They can execute their full attacks in hours. Most other ransomware groups take days.”
The group has been linked to high-profile hacks, including multimillion-dollar breaches at MGM Resorts and Caesars Entertainment in September 2023. Their tactics often involve posing as tech support to gain network access, a method used in the Aflac breach.
John Hultquist, chief analyst at Google’s Threat Intelligence Group, expressed concern about Scattered Spider’s capabilities, stating, “The threat I lose sleep over is Scattered Spider. They are already taking food off shelves and freezing businesses.”
As the investigation continues, Aflac is working to determine the full extent of the data potentially compromised in the breach.
