US insurance giant Aflac says hackers stole personal and health data of 22.6 million

In June, U.S. security elephantine Aflac disclosed a information breach wherever hackers stole customers’ idiosyncratic information, including Social Security numbers and wellness information, without saying however galore victims were affected. 

On Tuesday, the institution confirmed it has begun notifying astir 22.65 cardinal whose information was stolen during the cyberattack.

In a filing with the Texas lawyer general, Aflac said that the stolen information includes customer names, dates of birth, location addresses; government-issued ID numbers (such arsenic passports and authorities ID cards) and driver’s licence numbers, and Social Security numbers; arsenic good arsenic aesculapian and wellness security information.

And, in a filing with the Iowa lawyer general, Aflac said that the cybercriminals liable for the breach “may beryllium affiliated with a known cyber-criminal organization; national instrumentality enforcement and third-party cybersecurity experts person indicated that this radical whitethorn person been targeting the security manufacture astatine large.”

Given that Scattered Spider, an amorphous corporate of chiefly young English-speaking hackers, was targeting the security manufacture astatine the clip of the breach, it’s apt that this is the radical Aflac is referring to. 

A spokesperson for Aflac did not respond to TechCrunch’s petition for comment. 

The institution says it has astir 50 cardinal customers according to its authoritative website. 

Aflac was 1 of respective security companies hacked astatine astir the aforesaid time, including information breaches astatine Erie Insurance and Philadelphia Insurance Companies.