More than 22 million Aflac customers impacted by June data breach

Aflac suffered a data breach exposing the personal information of over 22 million customers, including Social Security numbers and health data. The attack was linked to the broader threat group Scattered Spider, which has been involved in multiple insurance industry attacks. #ScatteredSpider #Aflac

Keypoints

Aflac’s cybersecurity investigation concluded that over 22 million individuals’ data was stolen in a June breach.
The company identified no operational disruptions but confirmed sensitive information was accessed and exfiltrated.
The breach was part of a series of attacks linked to the cybercriminal group Scattered Spider, known for targeting insurers.
Law enforcement authorities disrupted the group’s leakage site and arrested two members in the U.K.
Victims are offered two years of identity protection services, with enrollment ending in April 2026.