Insurance firm Aflac acknowledges a cyber breach, implicated in a broader series of attacks focused on the insurance sector.

In a concerning turn of events, the insurance sector has become the latest target in a series of cyberattacks. Aflac Inc., a leading insurance company, and Erie Insurance Group have both fallen victim to these digital intrusions.

On June 12, 2025, Aflac Inc. was hit by a cyberattack, which appears to be part of a larger crime wave targeting the insurance industry. The attack is linked to the CL0P/Clop ransomware group, notorious for exploiting the MOVEit file transfer software vulnerability.

Simultaneously, Erie Insurance Group disclosed that it was the target of a cyberattack on June 7. The company has since regained control over its systems and sees no further evidence of malicious activity.

The hacking activities show the hallmarks of Scattered Spider, the notorious threat group linked to the 2023 MGM Resorts and Clorox hacks. This group, now known as the perpetrators behind the current crime wave, has been pivoting towards the insurance industry from the retail sector, where it had previously caused significant disruption.

The U.S. Securities and Exchange Commission was informed about the incident by Aflac Inc., and the company has begun a process of reviewing files that may have been accessed in the cyberattack. Aflac plans to notify regulators and will send breach letters to affected individuals, providing credit monitoring and identity-theft services.

The files containing claims information, health records, Social Security numbers, and other personal data related to customers, employees, beneficiaries, agents, and other individuals were compromised in the attack.

Meanwhile, Erie Insurance Group is working with third-party forensic experts to restore full access to customers, agents, and employees.

In the retail sector, the hacking spree began in April, with major victims including U.K. retailer Marks and Spencer, the Harrods department store chain, Victoria's Secret, and United Natural Foods, the largest supplier for Whole Foods.

Aflac Inc. was able to contain the attack within hours, and its systems remain operational. The company is serving customers as usual while responding to the incident.

Google Threat Intelligence Group warned about these activities on Monday, highlighting the need for heightened cybersecurity measures across industries. As the review process continues, both Aflac Inc. and Erie Insurance Group are working diligently to assess the extent of the damage and protect their customers' information.

Insurance firm Aflac acknowledges a cyber breach, implicated in a broader series of attacks focused on the insurance sector.