Aflac warns that a cyberattack may have compromised customer data: Here’s what we know so far.

Aflac has recently announced that a group of hackers managed to steal customer data in a cyberattack. Although details are limited, the company stated that the incident is attributed to a "sophisticated group of cybercriminals" targeting the insurance industry in general.

According to a mandatory statement filed with the SEC, the attackers were able to infiltrate Aflac's network on June 12. The company reported that it activated its cybersecurity incident response protocols and, as a result, managed to contain the intrusion within hours. However, the total scope of the incident remains unknown, and potentially compromised data includes health information, social security numbers, and other personal data.

It is important to note that Aflac assured that its systems were not affected by ransomware. The company is conducting a review of the files that may have been impacted and has indicated that it will not be able to determine the total number of individuals affected until this review is complete.

In a press release, Aflac also noted that the hackers accessed information through social engineering tactics, a common method that has led to other significant security breaches in the past. The text of the statement emphasizes that "this attack, like many others currently being experienced by insurance companies, was caused by a sophisticated group of cybercriminals." Additionally, it was mentioned that the files in question contain information about claims, as well as personal data of customers, beneficiaries, employees, and agents.

This attack is believed to be related to the actions of a group known as Scattered Spider, which is suspected of being responsible for recent disruptions in companies in the sector, such as Philadelphia Insurance Companies and Erie Indemnity. Aflac has offered potentially affected customers access to free credit monitoring services and identity theft protection.