AFLAC INC

Aflac contained the intrusion within hours, and by then attackers had already talked their way into employee accounts and left with data on about 22.6 million people: Social Security numbers, claims, health details. The break-in was a phone call, not an exploit; reporting ties it to Scattered Spider, though the lever was social engineering, not any flaw in the network. Fast containment is worth little when the theft finishes before the alarm does.