Summary
Aflac Incorporated has disclosed a cybersecurity incident where unauthorized access to its network was identified on June 12, 2025. The company's incident response protocols were promptly activated, and the intrusion was contained within hours without impacting business operations, ransomware, or the ability to service policyholders. While the company's core functions remain operational, a review of potentially impacted files is underway. These files may contain sensitive personal information, including claims, health, and social security numbers, belonging to customers, beneficiaries, employees, and agents within its U.S. operations. The full scope and potential financial or reputational impact of the incident are currently unknown and under investigation. Aflac anticipates notifying affected individuals and relevant regulators, and will offer free credit monitoring and identity theft protection services. The company has engaged external cybersecurity experts to assist in its response and the ongoing review.
Key Highlights
- 1Aflac Inc. experienced a cybersecurity incident involving unauthorized network access on June 12, 2025.
- 2The company believes the intrusion was contained within hours and has not impacted business operations or caused ransomware.
- 3Core services, including underwriting, claims processing, and customer service, remain operational.
- 4A review is in progress to determine the extent of potentially impacted personal information.
- 5Potentially impacted data includes sensitive information such as claims, health details, and social security numbers.
- 6Aflac will offer free credit monitoring and identity theft protection services to affected individuals.
- 7The full scope and ultimate impact of the incident are currently unknown.