The Wall Road Journal reviews that Aflac is investigating a breach which will have uncovered claims info, well being particulars, Social Safety numbers, and different private knowledge.
That’s the type of delicate private info you’ll count on your insurer to guard, not by chance hand over to cybercriminals.
Based on Aflac, the assault got here from a “extremely subtle and well-known group that has the insurance coverage business underneath siege”
Underneath siege? Feels like they’ve been watching too many Steven Seagal motion pictures (observe to self: one Steven Seagal film is just too many…)
However what’s extra upsetting than that’s the declare that the hackers are “extremely subtle.”
Is that as a result of they exploited a zero day vulnerability? No.
Is it as a result of they’ve an evil genius on their staff who created some undetectable malware? Nope.
Likelihood is that this is similar hacking gang (Scattered Spider) behind latest knowledge breaches at Marks & Spencer, Victoria’s Secret and different retailers, in addition to assaults focusing on insurance coverage companies throughout the USA.
Scattered Spider makes use of the “extremely subtle” technique of phoning a help desk claiming to be a locked out worker, and asking to be granted entry to the community. Possibly with a slice of phishing, SIM swapping, and multi-factor authentication (MFA) bombing.
Actually not that subtle in any respect…
