US insurance giant Aflac said hackers stole personal and health data of 22.6 million people

In June, US insurance giant Aflac has revealed a data breach The hackers stole customers’ personal information, including Social Security numbers and health information, without specifying the number of victims affected.

The company confirmed on Tuesday that it had begun notifying about 22.65 million people whose data was stolen during the cyber attack.

In a filing with the Texas Attorney General, Aflac said the stolen data included customer names, dates of birth, home addresses, government-issued identification numbers (such as passports and state ID cards), driver’s license numbers, and Social Security numbers, as well as medical and health insurance information.

and, In filing With the Iowa Attorney General, Aflac said the cybercriminals responsible for the breach “may be affiliated with a known cybercriminal organization; federal law enforcement and third-party cybersecurity experts have indicated that this group may have been targeting the insurance industry generally.”

Given that Scattered Spider, an amorphous group of young English-speaking hackers, was targeting the insurance industry at the time of the hack, it’s likely that this is the group Aflac is referring to.

An Aflac spokesperson did not respond to TechCrunch’s request for comment.

The company says it has about 50 million customers According to its official website.

Aflac was one of several insurance companies hacked around the same time, including data breaches at Erie Insurance and Philadelphia insurance companies.