A group of cybercriminals hacked into data systems at insurance company Aflac, possibly gaining access to sensitive information such as Social Security numbers and health reports, the company said on Friday.
Aflac, which boasts millions of customers, “identified suspicious activity” and “stopped the intrusion within hours,” the company said.
The company attributed the attack to a “sophisticated cybercrime group” but did not identify the organization.
MORE: Trump admin live updates: Appeals court keeps California National Guard in Trump’s hands
The cyberattack marks the latest in a string of data breaches targeting insurance companies, including attacks earlier this month against Philadelphia Insurance Companies and Erie Insurance.
“This attack, like many insurance companies are currently experiencing, was caused by a sophisticated cybercrime group. This was part of a cybercrime campaign against the insurance industry,” Aflac said in a statement.
The company has opened an investigation into the cyberattack, saying initial findings indicate the cybercriminals deployed “social engineering tactics” or measures that rely on manipulation to gain network access.
Information tied to customers’ insurance claims and personal data may also have been breached in the cyberattack, Aflac said.
MORE: A pregnant brain-dead woman in Georgia was kept on life support. Experts say it raises ethical, legal questions
“We regret that this incident occurred,” Aflac said. “We will be working to keep our stakeholders informed as we learn more and continue investigating the incident.”
Aflac generated nearly $19 billion in revenue last year, which marked a 1.2% increase over the previous year, according to an earnings release.
