Aflac says hackers may have stolen customers’ claims info, including Social Security numbers

Aflac, a major provider of accident, life, and health insurance policies, revealed on Friday that it had fallen victim to a cybersecurity attack that compromised its customers’ personal information. The attack, which took place on June 12, was carried out by a sophisticated cybercrime group using social engineering tactics to breach Aflac’s network.

Although the extent of the breach is still being investigated, Aflac disclosed that sensitive data such as claims information, health records, Social Security numbers, and other personal details may have been compromised. The company acted swiftly upon detecting suspicious activity on its U.S. network, preventing the intrusion from escalating into a ransomware attack. Aflac reassured its customers that its systems were not affected and that it was able to halt the breach within hours by initiating its cyber incident response protocols.

This incident marks Aflac as the latest victim in a series of cybersecurity attacks targeting the insurance industry. Other insurers, including Erie Insurance and Philadelphia Insurance Companies, have also reported network breaches in recent weeks. Aflac described the attack as part of a broader cybercrime campaign aimed at the insurance sector.

Cyberattacks have become increasingly sophisticated and widespread, affecting various industries such as cities, hospitals, hotels, and casinos. Last year, a cyberattack on UnitedHealth Group resulted in estimated losses of $100 million per day. In response to the breach, Aflac has launched an investigation led by third-party cybersecurity experts to assess the impact and is offering affected customers free credit monitoring, identity theft protection, and Medical Shield coverage for 24 months.

Despite the incident, Aflac assured customers that its business operations remain intact, allowing it to continue serving policyholders without disruption. To address customer concerns and provide support, Aflac has set up a dedicated call center reachable at 1-855-361-0305 during specified hours until the end of June.

In conclusion, cybersecurity threats pose a significant risk to businesses and individuals alike, underscoring the importance of robust security measures and proactive response strategies. Aflac’s handling of the breach exemplifies the critical role of cybersecurity in safeguarding sensitive data and maintaining customer trust in the face of evolving cyber threats.