Looks like Aflac is the latest insurance giant snagged in Scattered Spider’s web

Aflac disclosed unauthorized network access on June 12 attributed by investigators to the Scattered Spider group, part of a broader campaign that has also impacted Erie Insurance, Philadelphia Insurance Companies, and Tokio Marine North America; attackers used social engineering (fake help-desk calls) to gain access, likely exfiltrating claims information, health data, SSNs and other personal details, though no ransomware was deployed and operations were not disrupted. Aflac has engaged third-party cybersecurity experts and investigations are ongoing.