Personal information for more than 1.3 million Aflac cancer insurance and almost 760,000 Zurich Insurance auto insurance policy holders is on the dark web following a hack on a third-party contractor.
Neither company named the data leak site or third-party vendor involved with its breaches, so it is unclear if both incidents are related. Affected individuals from both hacks reside in Japan.
In an apology published Tuesday, Aflac’s Japanese unit says it confirmed information it received on Jan. 9 about customer information being posted onto a criminal data breach forum. A hacker took the data from a server used by an external outsourced contractor, Aflac says.
Personal information leaked include policyholders’ last names, age, gender, insurance type number, coverage amount and premiums.
A total of nearly 3.2 million records were accessed in the incident with more than 1.3 million customers enrolled in the company’s “new cancer insurance” and “super cancer insurance” policies affected by the breach, Aflac says.
