Data breach hits over 22M Aflac customers

Major U.S. insurance firm Aflac had data from nearly 22.7 million customers, beneficiaries, employees, and agents stolen following a cyberattack in June, reports The Record, a news site by cybersecurity firm Recorded Future. Unauthorized access to Aflac's systems has been thwarted "within hours" of the intrusion's discovery but not before threat actors were able to pilfer documents containing individuals' insurance claims, Social Security numbers, and health details, according to the Georgia-based insurance giant. Aflac, which emphasized that it did not experience a ransomware intrusion, offered two years of complimentary identity protection services to individuals affected by the incident. Such an intrusion against Aflac came amid Scattered Spider's attack spree against multiple insurance companies, including the Philadelphia Insurance Companies, Erie Insurance, and Scania Financial Services. Aside from having its data leak site dismantled by U.S. and French law enforcement in October, Scattered Spider also had its members apprehended and indicted in the UK.