Aflac: 'Cybercrime Campaign' Is Targeting Insurance Industry

Experts Suspect Scattered Spider Is Behind Rash of Recent Insurer Breaches Marianne Kolbasuk McGee (HealthInfoSec) • June 20, 2025

Aflac, the largest U.S. provider of supplemental health insurance, says it's the latest victim of a coordinated campaign targeting insurance companies in recent weeks. Threat researchers say the attacks could be linked to a single cybercrime group.

See Also: Top 10 Technical Predictions for 2025

"This attack, like many insurance companies are currently experiencing, was caused by a sophisticated cybercrime group. This was part of a cybercrime campaign against the insurance industry," Aflac said in an U.S. Securities and Exchange Commission filing and public statement about the incident discovered on June 12. Aflac said the incident did not involve ransomware encryption of its IT systems, but did potentially compromise data.

Some experts said recent attacks on Aflac and two Pennsylvania-based insurers have all the hallmarks of cybercrime ...