Overview

• Aflac detected unauthorized access on June 12 and stopped the intrusion within hours without deploying ransomware or interrupting business operations.
• The incident may have compromised U.S. customer claims information, health records and Social Security numbers as part of a broader campaign hitting insurers including Erie and Philadelphia.
• Preliminary findings point to a sophisticated group using social engineering tactics consistent with known Scattered Spider methods.
• The insurer has retained external cybersecurity experts and commenced a file review to identify affected individuals and assess the breach’s scope.
• Aflac is offering two years of free credit monitoring, identity theft protection and Medical Shield coverage to customers who contact its dedicated call center.