Loading story…
American Family Insurance confirmed that a cyberattack caused widespread IT outages after customers reported problems accessing systems and services. The insurer said it detected unauthorized activity in its network and took systems offline as part of containment and response efforts, disrupting parts of its business while it worked to investigate the intrusion and restore operations.
Aflac later disclosed a separate cybersecurity incident affecting its environment, adding to concerns about cyber risk across the insurance sector. The company said it had activated incident response procedures and was assessing the scope and impact of the breach, while both disclosures underscored how attacks on major insurers can interrupt customer-facing services and trigger prolonged forensic and recovery efforts.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Aflac Incorporated publicly disclosed that it had experienced a cybersecurity incident. The announcement marked the company's formal acknowledgment of the event to investors and the public.
American Family Insurance disclosed that a cyberattack was responsible for ongoing IT outages affecting its systems and operations. The confirmation established the outages as a security incident rather than a routine technical disruption.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Aflac, the largest U.S. supplemental health insurance provider, has notified 22.65 million individuals that their sensitive health and personal information, including Social Security numbers, may have been compromised in a major data breach that occurred in June 2025. The incident, which Aflac described as part of a "sophisticated cybercrime campaign" targeting the insurance industry, is expected to be the largest health data breach reported to U.S. federal regulators in 2025 once official numbers are updated on the Department of Health and Human Services' HIPAA Breach Reporting Tool. Security researchers have speculated that the cybercriminal group Scattered Spider may be responsible for the attack, which coincided with similar incidents affecting other large U.S. insurers. Aflac initially reported the breach to the HHS Office for Civil Rights with a placeholder estimate of 500 affected individuals, but the updated figure of 22.65 million significantly increases the scale and impact of the incident. The breach highlights ongoing threats to the insurance sector and the potential for large-scale exposure of sensitive health data.
Jun 29, 2026
Erie Indemnity Company disclosed in an **8-K filing** that it detected unusual network activity and took systems offline to contain what it later identified as an information security incident. The outage disrupted core business operations, including customer-facing and internal services, and affected Erie Insurance’s ability to process claims, access policy information, and support routine communications while the company worked with law enforcement and external cybersecurity specialists. Subsequent reporting said the incident caused prolonged business disruption across Erie Insurance’s network, with online systems and service channels remaining impaired as the company pursued containment and recovery. In a later public statement, Erie said it was continuing forensic investigation and remediation efforts, restoring systems in phases, and monitoring for potential impacts tied to the attack while advising customers and partners that service delays could continue during recovery.
Jul 10, 2026
Aflac Life Insurance Japan disclosed that an unauthorized third party accessed its systems between June 15 and June 25, exposing data tied to about **4.38 million customers**. The company said the compromised information included names, dates of birth, addresses, phone numbers, policy coverage details, and data related to insurance representatives and commercial agencies; roughly **230,000 records** also contained bank account information. Aflac said the incident was limited to its Japan operations, that U.S. business systems were not accessed, and that affected systems were suspended after the intrusion was discovered on June 25. The breach adds to a broader pattern of cyber incidents affecting Japanese organizations, where public reporting has shown hundreds of ransomware and extortion-related cases and frequent abuse of internet-facing systems such as VPN appliances and RDP. Research on disclosed incidents involving Japanese firms found that attackers often move quickly to leak or weaponize stolen data and increasingly time disruptive actions for nights or weekends, underscoring the operational pressure facing defenders. Aflac said it has brought in third-party cybersecurity experts and notified Japan’s Financial Services Agency and police, while stating that no confirmed misuse of the stolen data had been identified at the time of disclosure.
Jul 7, 2026