Major US insurance company Aflac says hackers stole personal and health information of 22.6 million people

In June, Major US insurance company Aflac has disclosed a data breach where hackers stole customer information, including Social Security numbers and health information, not to mention how many people were affected.

On Tuesday, the company confirmed that it has begun notifying approximately 22.65 million people whose data was stolen during the cyberattack.

In discussions with the Texas attorney general, Aflac said the stolen data included customers’ names, dates of birth, home addresses, government-issued ID numbers (such as passports and state IDs) and driver’s license numbers, and Social Security numbers, as well as medical and health insurance information.

And, in the file and Iowa’s attorney general, Aflac said the cybercriminals who violated the law “may be affiliated with a known cyber-criminal organization; federal law enforcement and third-party security experts have indicated that this group may be targeting insurance companies.”

Given that the Scattered Spider, an amorphous group of young English-speaking criminals, was targeting the insurance industry at the time, it is likely that this is the group Aflac is referring to.

An Aflac spokesperson did not respond to TechCrunch’s request for comment.

The company claims to have approximately 50 million customers according to its official website.

Aflac was one of the insurance companies that was hacked at the same time, including a data breach Erie Insurance and Insurance Companies of Philadelphia.