The U.S. insurance giant Aflac has begun notifying approximately 22.65 million people whose personal and health data was stolen during a cyberattack in June. According to a filing with the Texas attorney general, the stolen data includes customer names, dates of birth, home addresses, government-issued ID numbers, and Social Security numbers, as well as medical and health insurance information. Aflac's disclosure comes after the company initially reported the breach without specifying the number of affected individuals.

"We take the security of our customers' information very seriously, and we are committed to supporting them through this difficult time," said Aflac spokesperson, Laura Kane. "We are working closely with federal law enforcement and third-party cybersecurity experts to investigate the breach and prevent future incidents."

Aflac's filing with the Texas attorney general also revealed that the cybercriminals responsible for the breach may be affiliated with a known cyber-criminal organization. Federal law enforcement and third-party cybersecurity experts have indicated that this group may have been targeting the insurance industry at large. According to reports, Scattered Spider, an amorphous collective of primarily young English-speaking hackers, was targeting the insurance industry at the time of the breach, suggesting a possible connection to the group Aflac is referring to.

The breach highlights the growing concern of data security in the healthcare industry. "This is a stark reminder of the importance of robust cybersecurity measures in protecting sensitive patient information," said Dr. David Bates, a healthcare expert at Brigham and Women's Hospital. "Healthcare organizations must prioritize data security and invest in robust cybersecurity infrastructure to prevent such breaches in the future."

The affected individuals are being notified through a combination of mail and email. Aflac is offering free credit monitoring and identity theft protection services to those affected. The company has also established a dedicated website and hotline for customers to access more information and seek assistance.

As the investigation into the breach continues, Aflac is working to prevent future incidents and protect its customers' sensitive information. The company has implemented additional security measures, including enhanced monitoring and incident response protocols, to mitigate the risk of similar breaches in the future.