CFOs 'are uniquely positioned to quantify cyber risks' |
Aflac, a leading U.S. insurance provider, has reported a cyberattack that compromised customer personal information, including Social Security numbers and health data. The breach, identified on June 12, affected not only customers but also beneficiaries, employees, and agents. Aflac said that the incident was not linked to ransomware but was executed by a cybercrime group targeting the insurance sector. John Hultquist, chief analyst at Mandiant, Google's threat intelligence unit, noted that the hackers, associated with Scattered Spider, utilize social engineering tactics to infiltrate networks. Aflac, which serves around 50m customers, joins other insurers facing similar threats amid rising cyberattacks in the industry, with Erie Insurance and Philadelphia Insurance recently reporting incidents. The average cost of a data breach was $9.36m in 2024, which remains the highest average among the 16 countries and regions studied, according to IBM research. Cyber risks can manifest in many ways, and CFOs are uniquely positioned to quantify these risks and estimate the cost of incidents. By collaborating closely with chief information security officers, CFOs can better understand risk probability and exposure, set spending and ROI metrics, and communicate recommendations for prioritizing cybersecurity investments.