Major insurance company hit by cyber attack: What customers should do immediately

Aflac, the largest provider of supplemental insurance in the United States, confirmed Friday that there was a breach in its systems earlier this month.

“On June 12, 2025, Aflac Incorporated identified suspicious activity on our network in the United States,” a release from the company reads.

“We promptly initiated our cyber incident response protocols and stopped the intrusion within hours. Importantly, our business remains operational, and our systems were not affected by ransomware.”

The attack was caused by “a sophisticated cybercrime group” as part of a cybercrime campaign against the insurance industry, according to the release.

Erie Insurance and Philadelphia Insurance Companies have reported similar hacks this month.

And all three of the major hacks are consistent with techniques used by a group of young cybercriminals known as Scattered Spider, according to a report from CNN.

The group, which famously carried out a hacking spree across Las Vegas casinos in September 2023, is believed to be made up of teens and young adults in the US and UK and is known for aggressively extorting victims, according to the New York Post.

The company said the investigation is still in early stages, but confirmed that claims information, health information, social security numbers, and/or other personal information, related to customers, beneficiaries, employees, agents, and other individuals in our U.S. business, are among the potentially impacted files.

“We regret that this incident occurred,” the release reads.

“We will be working to keep our stakeholders informed as we learn more and continue investigating the incident.”

The release added that Aflac is offering any individual who contacts its dedicated call center free credit monitoring and identity theft protection, and Medical Shield for 24 months.

Customers can reach the call center at 1-855-361-0305 starting on June 20 at 8 a.m. Eastern Time.

The call center is available Monday through Friday from 9 a.m. – 9 p.m. Eastern Time, Saturday from 9 a.m. – 5:30 p.m. Eastern Time and Sundays from 10 a.m. – 4 p.m. Eastern Time until the end of June and excluding major U.S. holidays, according to the release.