Insurance titan Aflac has fallen victim to a cyberattack, potentially exposing the personal data of its numerous customers. The breached information could include sensitive details such as Social Security numbers and health records, according to the company’s announcement last Friday.
The company, serving millions of customers, was able to “identify suspicious activity” and “halt the intrusion within hours” of its occurrence. Aflac has attributed this breach to a “sophisticated cybercrime group”, the identity of which remains undisclosed at this time.
Similar data breaches have been targeting insurance companies, with Philadelphia Insurance Companies and Erie Insurance among the recent victims.

“This attack, like many insurance companies are currently experiencing, was instigated by a sophisticated cybercrime group. This was part of a cybercrime campaign against the insurance industry,” Aflac confirmed in a statement.
An investigation has been opened by the company into this cyberattack. Initial findings suggest that the cybercriminals deployed “social engineering tactics”, using deceptive measures to gain network access.

Reports indicate that information tied to customers’ insurance claims and personal data may also have been compromised in the attack. “We regret that this incident occurred,” Aflac stated. “We will be working to keep our stakeholders informed as we learn more and continue investigating the incident.”
In financial terms, Aflac generated nearly $19 billion in revenue last year, marking a 1.2% increase over the previous year, as per an earnings release.
As we follow this situation closely, we are reminded of the importance of rigorous cybersecurity measures in protecting the personal information of consumers.
