Three Insurers in One Campaign, Two of Them in One State

Reporting on the 2025 social-engineering campaign names Aflac, Erie Insurance Group and Philadelphia Insurance Companies among affected US insurers, alongside Farmers at 25-0529 and Allianz Life at 25-0717.

At 25-0601 this desk argued that insurance is structurally reachable — a wide intermediary population of agents and brokers who are not employees, data held in the sales estate rather than the regulated core, and supervision attaching to the insurer rather than the platform.

That argument was built on two incidents. Five is enough to say the sector was worked deliberately, in the sector-rotation pattern at 25-0512, and that the shared characteristic is more likely structural than coincidental.

What every affected insurer has is a support function serving people it cannot identify by sight — independent agents, brokers, adjusters, and financial professionals holding access across multiple carriers.

A caller claiming to be an agent locked out before a client meeting is making a request that function exists to grant, urgently, dozens of times a day. This desk filed the general form at 25-0724: an unsophisticated technique that works is worse than a sophisticated one, because it is available to far more people.

The campaign was recognised backwards, per 25-0529. By the time a pattern was visible, several insurers had already been reached.

This is the case for the cross-incident warning mechanism proposed at 25-0830: a regulator receiving multiple filings describing the same technique against the same sector is uniquely placed to warn the rest, earlier and without a commercial interest. No such mechanism operated here.

Graded medium: campaign membership is as attributed by researchers, and this desk has not established the vector for each named insurer individually.