Scattered Spider cybercrime group breaches Aflac Insurance
Learn More
The American insurance company Aflac is reporting a cybersecurity incident on Friday, June 20, 2025.
The company detected an unauthorized access to its network on June 12, 2025, and contained the intrusion several hours after discovery. The attack was executed through social engineering tactics. Aflac did not explicitly name the threat actors, cybersecurity experts and sources familiar with the investigation have indicated that the incident resembles techniques of the cybercrime group Scattered Spider,.
Aflac acknowledged that the attack was "part of a cybercrime campaign against the insurance industry" carried out by a "sophisticated cybercrime group."
The cybercriminals may have gained access to files containing sensitive personal information. The affected individuals may include customers, beneficiaries, employees, insurance agents, and other individuals associated with Aflac's U.S. business operations. The potentially compromised data includes:
- Claims information
- Health information and medical data
- Social Security numbers
- Other personal information
The number of affected individuals is not disclosed.
The company has emphasized that the investigation remains in its early stages, and they are unable to determine the total number of affected individuals until a full review of potentially impacted files is completed.
Aflac claims that their systems were not affected by ransomware, and business operations have continued without interruption.
Update - as of 21st of December 2025, Aflac completed the investigation and is notifying approximately 22.65 million affected individuals.
