[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmrnbUadYg1jNvtcaVGrD8b5GtT5cIkig3E-afKwewQc":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"e8ae11fc-83b6-4ec7-ad70-1072d0d2656b","Insurance giant Aflac discloses data breach after subsidiary hack","insurance-giant-aflac-discloses-data-breach-after-subsidiary-hack-3f4d09","American insurance giant Aflac has disclosed a new data breach after attackers breached its Japan subsidiary's systems and stole personal and bank account information. [...]","Aflac has disclosed a data breach affecting its Japan subsidiary, Aflac Japan, where attackers accessed systems between June 15 and June 25, 2026. The breach resulted in the theft of personal and bank account information, as well as policy and coverage details. Aflac Japan has alerted Japanese authorities and plans to notify affected individuals, while confirming that U.S. systems were not compromised.","Aflac Japan reports data breach after unauthorized access to systems.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Finsurance-giant-aflac-discloses-data-breach-after-subsidiary-hack\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F06\u002F20\u002F0_Aflac.jpg","2026-06-30T11:12:18+00:00","2026-06-30T12:00:14.311608+00:00",7,[17,20],{"name":18,"type":19},"Aflac","vendor",{"name":21,"type":22},"Scattered Spider","threat_actor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":44,"vendors":132},[45,74,103],{"slug":46,"name":47,"problem":48,"products":49},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"slug":75,"name":76,"problem":77,"products":78},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"slug":104,"name":105,"problem":106,"products":107},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",[],{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":149},"aflac-japan-subsidiary-breach-exposes-customer-financial-and-policy-data","Aflac Japan Subsidiary Breach Exposes Customer Financial and Policy Data","Attackers gained access to Aflac Japan's systems for ten days before detection, stealing sensitive personal, banking, and insurance policy data. The breach highlights how subsidiary or regional entities can become weak links when they operate with less rigorous security controls than the parent organization. The fact that U.S. systems were unaffected suggests some degree of network separation exists, but the prolonged dwell time indicates insufficient monitoring and access controls within the Japan environment. This incident matters because financial and insurance data is highly valuable to threat actors for fraud, identity theft, and targeted phishing campaigns.",[138,139,140,141,142,143,144,145,146,147,148],"CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-17 (Remote Access)","NIST SP 800-53 SC-7 (Boundary Protection)","NIST SP 800-53 SI-4 (System Monitoring)","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of a Personal Data Breach to Supervisory Authority","ISO\u002FIEC 27001:2022 A.8.22 – Segregation of Networks","Japan Act on the Protection of Personal Information (APPI) – Article 26 (Breach Notification)",{}]