Insurance giant Aflac discloses data breach after subsidiary hack

BleepingComputer

Overview

Aflac, the American insurance company, has revealed a data breach involving its subsidiary in Japan. Attackers gained unauthorized access to the subsidiary's systems, resulting in the theft of personal and bank account information belonging to customers. This incident raises significant concerns about the security of sensitive data, especially in the financial sector, where trust is paramount. Aflac has not disclosed the exact number of customers affected, but the breach could impact many individuals who rely on their services. As companies increasingly face cyber threats, this incident serves as a reminder for organizations to prioritize data security measures and protect their clients' information.

Key Takeaways

  • Affected Systems: Personal and bank account information of Aflac customers in Japan
  • Timeline: Disclosed on [date not specified]

Original Article Summary

American insurance giant Aflac has disclosed a new data breach after attackers breached its Japan subsidiary's systems and stole personal and bank account information. [...]

Impact

Personal and bank account information of Aflac customers in Japan

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Disclosed on [date not specified]

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Data Breach.

Related Coverage

AI is Writing Your Code… And It’s Insecure | The New AppSec Reality - WC #1

SCM feed for Latest

The article discusses the growing reliance on AI for writing code and the security vulnerabilities that can arise from this practice. Researchers have found that AI-generated code often contains flaws and security weaknesses that can be exploited by attackers. This is a concern for developers and companies who use these tools, as insecure code can lead to data breaches and other serious security incidents. The article emphasizes the importance of reviewing and testing AI-generated code before deployment to mitigate risks. With more organizations adopting AI for software development, understanding these potential security pitfalls is crucial.

Jun 30, 2026

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

The Hacker News

Researchers have discovered that attackers are exploiting a serious vulnerability in Langflow, identified as CVE-2026-33017, which has a CVSS score of 9.3. This flaw allows for unauthenticated remote code execution (RCE), making it a prime target for cybercriminals. In recent attacks, these hackers have been using the vulnerability to deploy a Monero cryptocurrency miner on exposed AI application endpoints. Organizations using Langflow need to be particularly vigilant as the vulnerability is actively being exploited. This situation underscores the critical need for timely updates and security measures to protect sensitive systems from unauthorized access.

Jun 30, 2026

Nissan Americas Hit in Global Oracle PeopleSoft Data Breach

Cyber Defense Magazine

Nissan Americas has been impacted by a significant data breach linked to a zero-day vulnerability in Oracle’s PeopleSoft software, identified as CVE-2026-35273. This vulnerability has led to a series of attacks, with researchers connecting it to a group known as UNC6240, which is believed to be exploiting the weakness. The breach raises serious concerns about the security of sensitive employee information and operational data within Nissan Americas and potentially other organizations using the same software. As attackers continue to exploit this vulnerability, affected companies must act quickly to secure their systems and protect their data from further unauthorized access.

Jun 30, 2026

Lessons from the Underground: How to Combat Business Email Compromise

BleepingComputer

Business Email Compromise (BEC) is a significant cybersecurity issue that goes beyond simple email scams. It involves sophisticated operations where attackers compromise email accounts, conduct financial research, and utilize cash-out networks to steal money from businesses. Research into underground forums reveals the methods and strategies used by these attackers, emphasizing the need for companies to be vigilant. The impact of BEC is widespread, affecting organizations of all sizes and sectors, as it can lead to substantial financial losses. Understanding how these attacks are planned and executed is crucial for businesses to develop effective defenses against them.

Jun 30, 2026

BlueHammer Vulnerability Exploited in Ransomware Attacks

SecurityWeek

The Microsoft Defender vulnerability identified as CVE-2026-33825 has been actively exploited in ransomware attacks before any patches were made available. This zero-day vulnerability poses a significant risk to users of Microsoft Defender, as attackers have been able to take advantage of this flaw to deploy ransomware. The situation is urgent, as organizations using this security software may find themselves vulnerable to data breaches and financial loss. Experts strongly recommend that all users of Microsoft Defender remain vigilant and apply any available security updates as soon as they are released to mitigate potential risks. Immediate action is crucial to protect sensitive information from being compromised by malicious actors.

Jun 30, 2026

The Realities of AI Video Surveillance

Schneier on Security

The Financial Times reports on how artificial intelligence is transforming video surveillance capabilities, particularly in regions like Israel, Iran, and Russia. Unlike traditional surveillance systems that rely on limited preset searches, new AI tools allow users to ask natural language questions about video footage. This advancement significantly enhances the ability to analyze and interpret vast amounts of video data. The implications are profound, as these technologies could facilitate mass surveillance and monitoring, raising concerns about privacy and civil liberties. As AI continues to evolve, the potential for misuse in state and corporate surveillance becomes a critical issue that demands attention.

Jun 30, 2026