Aflac Data Breach By Scattered Spider Hackers Is No Quacking Matter
NEW YORK - FEBRUARY 25: The Aflac Duck rings the closing bell at the New York Stock Exchange on ... More February 25, 2010 in New York City. (Photo by)
When you hear the name Aflac, you, probably like me, hear the quacking duck from their commercials. Unfortunately, however the recently announced data breach at Aflac is no quacking matter.
Aflac disclosed on June 20th that it had suffered a data breach that may have compromised sensitive personal information held by the company, which offers a wide range of insurance products to millions of people. According to Aflac, it noticed suspicious activity on its networks on June 12th and is now in the early stages of investigating the extent of the data breach with the help of outside cybersecurity experts. Aflac's press release states that it did not find evidence of ransomware, but doesn't yet know the extent of the data breach which may include social security numbers and other sensitive information.
It is believed that the data breach was the work of the infamous hacking group called Scattered Spider which focuses its efforts on one specific industry at a time, often using ransomware. The September 2023 ransomware attacks on MGM Resorts and Caesars Entertainment were attributed to Scattered Spider.
Now, according to the Google Threat Intelligence Group, Scattered Spider is targeting the insurance industry. Earlier this month Erie Insurance suffered a data breach attributed to Scattered Spider. Google Threat Intelligence Group chief analyst John Hulquist warned 'Given this actor's history of focusing on a sector at a time, the insurance industry should be on high alert, especially for social engineering schemes, which target their help desks and call centers.'
Scattered Spider is thought to be made up of English-speaking Americans and British hackers. In 2024 four Americans and one British national were indicted on cybercriminal charges related to activities of Scattered Spider.
Social engineering is the cornerstone of the crimes of Scattered Spider and, according to Aflac, was how their data breach was accomplished. The hackers of Scattered Spider have been known to call IT support posing as employees of the company they are targeting and convince the IT support staff to reset passwords or multi-factor authentication.
Scattered Spider also attacks Managed Service Providers which are third-party companies that remotely manage the network and infrastructure systems for companies. Often these Managed Service Providers are a weak link in a company's security. Additionally, Managed Service Providers provide their services to many customers so breaching their security turns into one stop shopping for hackers targeting multiple companies.
Alfac is offering free credit monitoring and identity theft insurance to its customers for two years. If you are an Aflac customer and wish to get those free benefits, you should call Aflac's Call Center at 1-855-0305.
Potential victims of this data breach should also freeze their credit if they have not already done so. Freezing your credit is something everyone should do. It is free and easy to do. It protects you from someone using your identity to obtain loans or make large purchases even if they have your Social Security number. If you have not already done so, put a credit freeze on your credit reports at all of the major credit reporting agencies. Here are links to each of them with instructions about how to get a credit freeze:
Equifax
TransUnion
Experian
Everyone also should monitor their credit reports regularly for indications of identity theft. The three major credit reporting agencies now provide free weekly access to your credit reports so you can monitor your credit reports easily on your own. Here is the only link to use to get your free credit report.
Finally, be wary of anyone who calls you purporting to help you in regard to this or any other data breach who asks for personal information regarding a data breach as that is a favorite tactic of hackers to lure you into providing additional personal information that can lead to your becoming a victim of identity theft. Also, as always, never click on a link or download an attachment to an email or text message unless you have absolutely confirmed that it is legitimate and don't provide personal information in response to an email, text message or phone call unless you have absolutely confirmed that the communication was legitimate.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
39 minutes ago
- Yahoo
On This Day, June 21: 7.7-magnitude earthquake in Iran kills nearly 50,000
On this date in history: In 1788, the U.S. Constitution became effective when it was ratified by a ninth state, New Hampshire. In 1942, German forces, led by Gen. Erwin Rommel, took control of Tobruk, Libya, in an assault on British forces. The North African city was a key port on the Mediterranean Sea. In 1945, Japanese defenders of Okinawa surrendered to U.S. troops. In 1964, Ku Klux Klan members killed three civil rights activists -- James Chaney, Andrew Goodman and Michael Schwerner -- and hid their bodies in unmarked graves. An informer led the FBI to the three men's graves 44 days later. In 1982, John Hinckley Jr. was found not guilty by reason of insanity in the March 1981 shootings of U.S. President Ronald Reagan and three other people who were also wounded. Hinckley has been in a hospital in Washington, with permission in recent years to spend time outside the institution with his family. In 1985, international experts in Sao Paulo, Brazil, conclusively identified the bones of a 1979 drowning victim as the remains of Dr. Josef Mengele, a Nazi war criminal, ending a 40-year search for the "angel of death" of the Auschwitz concentration camp. In 1990, an earthquake measuring 7.7 on the Richter scale struck northwestern Iran, killing up to 50,000 people. In 1997, Cambodia announced the capture of former Khmer Rouge leader Pol Pot. In 2005, a Mississippi jury convicted 80-year-old former Ku Klux Klan leader Edgar Ray Killen of manslaughter in the 1964 killings of three civil rights workers. He was sentenced to 60 years in prison and died in 2018. In 2008, nearly 1,400 people, most of them on a ferry that capsized, were killed in Typhoon Fengshen in the Philippines. In 2011, a RusAir passenger plane flying from Moscow to Petrozavodsk in rain and fog crashed on a highway near an airport and broke apart in flames. Forty-four people died, eight survived. In 2020, the acoustic guitar Nirvana frontman Kurt Cobain used during the band's 1993 MTV Unplugged special sold for more than $6 million. It set a new record for highest auction price for a guitar in history. In 2021, Las Vegas Raiders defensive lineman Carl Nassib became the first active NFL player in league history to come out as gay. In 2021, Laurel Hubbard made history as the first openly transgender athlete to be selected to compete in an Olympic Games, qualifying for a spot on New Zealand's weightlifting team. In 2023, the Food and Drug Administration granted approval for GOOD Meat, the meat division of Eat Just, and UPSIDE Foods, to sell cultivated poultry in the United States. It was the first approval by the regulatory body for companies to produce meat by growing cells extracted from an animal's body.
Yahoo
41 minutes ago
- Yahoo
Woman arrested, facing charges in connection to Middletown fatal shooting
Jun. 21—A 28-year-old woman was arrested Friday in connection to a Monday fatal shooting in Middletown in the parking lot of a bar. The Middletown Division of Police and the Kettering Police Department took Dyshonna T. Goins into custody and she is facing one count of felonious assault, according to the Middletown Division of Police. "This arrest is part of an ongoing investigation into a shooting that took place in Middletown in the early morning hours of June 16, 2025," the police said. On Monday, crews responded to reports of shots fired at Bar II's parking lot located on 1200 Elliott Drive around 2:40 a.m. Jesse Jones. 36, was killed in the shooting and three additional people were injured. Police said the fight began in the parking lot of Bar II and not inside the bar. Video footage from buildings near the incident was collected. At the time, no suspects were identified. If you have any information about this incident, contact Detective Terry Ballinger at 513-425-7741, at the email terryb@ or police dispatch at 513-425-7700.
Yahoo
41 minutes ago
- Yahoo
Former Ohio State offensive lineman Kirk Barton charged after fatal crash
Former Ohio State offensive lineman Kirk Barton has been charged with aggravated vehicular homicide following a fatal crash early Saturday in Dublin, Ohio. According to the City of Dublin, Barton, 40, is suspected of driving a Ford F150 Raptor pickup track "at a high rate of speed" before entering Historic Dublin, where he crashed into a Lexus on West Bridge Street around 3 a.m. Advertisement The driver of the Lexus, 24-year-old Ethan Perry, died on the scene, according to the city. Barton sustained non-life-threatening injuries. He was eventually released from Riverside Methodist Hospital into Dublin Police custody, the city said. Barton was then moved to Franklin County Jail. NBC4 reported Saturday that Barton was charged with a second-degree felony count of aggravated vehicular homicide while operating a vehicle under the influence, according to Franklin County court records, which also show Barton has been charged with multiple traffic-related offenses in the past. Barton is scheduled for an arraignment Monday at 9 a.m., per NBC4. Advertisement Once a 2008 seventh-round NFL Draft pick of the Chicago Bears, Barton bounced around the league during his three-year pro career. In addition to the Bears, he also spent time with the Miami Dolphins, San Francisco 49ers, Cincinnati Bengals, Detroit Lions, Denver Broncos and Carolina Panthers. Barton played at Ohio State from 2003-07. He earned first-team All-American honors at right tackle in 2007. That season, the Buckeyes went 11-2 and finished No. 5 in the AP Poll. Ohio State was ranked the No. 1 team in the country before losing the BCS Championship to LSU 38-24.
