On June 12, 2025, Aflac found suspicious exercise on its United States community. In keeping with the company, cyber incident response protocols had been initiated, and the intrusion was halted inside hours of discovery.
Right now, the enterprise stays operational. The group can evaluation claims, underwrite insurance policies and serve clients as standard.
The group states that this assault was the duty of a cybercrime group that has been focusing on the insurance coverage sector, which the Google Threat Intelligence Group has warned about beforehand.
Whereas an investigation into the cyber incident is ongoing, the corporate has shared some preliminary findings:
- A social engineering assault was doubtless the reason for this assault, enabling the malicious actor to achieve entry to the community.
- Probably affected recordsdata embrace claims data, well being data, Social Safety numbers and extra.
- The personally identifiable data (PII) associated of shoppers, beneficiaries, staff, brokers or others could also be in danger.
- At present, it’s unclear what number of people could also be impacted by this occasion.
The corporate states that it’s going to present extra data because the investigation continues.
