Archive — US — techcrunch
US insurance giant Aflac says hackers stole personal and health data of 22.6million people
Aflac has confirmed a data breach affecting 22.65 million individuals, with hackers stealing personal and health data, including Social Security numbers. The breach is reportedly linked to a cybercriminal group targeting the insurance sector. Aflac is notifying affected customers as it works with law enforcement and cybersecurity experts to manage the incident.
Key points
- In June, Aflac disclosed a data breach but did not initially specify the number of victims.
- On a recent date, Aflac confirmed that 22.65 million people's data was compromised.
- The stolen information includes names, dates of birth, addresses, government IDs, and health information.
- Aflac suggested the attackers may belong to a cyber-criminal organization targeting the insurance industry.
- Scattered Spider, a hacking group, is suspected to be responsible for the breach.
- During the same period, other insurance companies, like Erie and Philadelphia Insurance, experienced similar breaches.
Why it matters
- The incident highlights the increasing frequency of cyberattacks targeting the insurance sector, aligning with trends of heightened cybersecurity threats in 2025.
- Data privacy breaches are becoming more common, stressing the importance of robust cybersecurity measures in financial and healthcare sectors.
- Previous significant breaches have led to regulatory changes and increased consumer awareness regarding data protection and privacy.
Aflac's breach underscores the growing security challenges in the insurance industry and the urgent need for comprehensive data protection strategies as cyber threats evolve.