Aflac notifies SEC of breach suspected to be work of Scattered Spider

In Data Breach News
June 20, 2025

DataBreaches.net reports that Aflac has notified the Securities & Exchange Commission (SEC) of a data security incident.

The incident did not involve ransomware, and appears to have the same characteristics as breaches at two other U.S. insurers this month: Erie Insurance and Philadelphi Insurance Companies.

The group known as Scattered Spider is suspected of being involved in these attacks, as Google’s Threat Intelligence Group warned the insurance industry earlier this week.

DataBreaches.net reports:

A source with knowledge of Aflac’s incident tells DataBreaches that although Aflac does suspect the attack is the work of  Scattered Spider because of the characteristics of the attack, it couldn’t be sure at this point because the attackers did not identify themselves.

Read more at DataBreaches.net.

Previous coverage: https://databreachtimes.com/insurance-news/first-ms-now-insurers-are-scattered-spiders-target/