01—Abstract
Summary
Summary of the 8-K filed June 20, 2025. Cited figures are marked; the original filing is the authoritative source.
Aflac Incorporated has disclosed a cybersecurity incident where unauthorized access to its network was identified on June 12, 2025.
The company's incident response protocols were promptly activated, and the intrusion was contained within hours without impacting business operations, ransomware, or the ability to service policyholders. While the company's core functions remain operational, a review of potentially impacted files is underway. These files may contain sensitive personal information, including claims, health, and social security numbers, belonging to customers, beneficiaries, employees, and agents within its U.S. operations.
The full scope and potential financial or reputational impact of the incident are currently unknown and under investigation. Aflac anticipates notifying affected individuals and relevant regulators, and will offer free credit monitoring and identity theft protection services. The company has engaged external cybersecurity experts to assist in its response and the ongoing review.
02—Key points
Key Highlights
- Aflac Inc. experienced a cybersecurity incident involving unauthorized network access on June 12, 2025.
- The company believes the intrusion was contained within hours and has not impacted business operations or caused ransomware.
- Core services, including underwriting, claims processing, and customer service, remain operational.
- A review is in progress to determine the extent of potentially impacted personal information.
- Potentially impacted data includes sensitive information such as claims, health details, and social security numbers.
- Aflac will offer free credit monitoring and identity theft protection services to affected individuals.
- The full scope and ultimate impact of the incident are currently unknown.
03—Questions
Frequently Asked Questions
What happened to Aflac?
Aflac Inc. identified unauthorized access to its network on June 12, 2025. The company promptly initiated its cybersecurity incident response protocols and believes it contained the intrusion within hours.
Has this incident affected Aflac's ability to operate or serve customers?
No, Aflac states that its business remains operational, its systems were not affected by ransomware, and it continues to serve policyholders as usual, including underwriting policies, reviewing claims, and servicing customers.
What kind of information might have been compromised?
The review is in its early stages, but potentially impacted files may contain claims information, health information, social security numbers, and/or other personal information related to customers, beneficiaries, employees, and agents in its U.S. business.
What steps is Aflac taking to address the incident and protect affected individuals?
Aflac has engaged leading third-party cybersecurity experts, is conducting a review of potentially impacted files, and anticipates notifying regulators and affected individuals. Individuals will be offered free credit monitoring and identity theft protection services.
04—Continue