01—Abstract
Summary
Summary of the 8-K filed June 30, 2026. Cited figures are marked; the original filing is the authoritative source.
Aflac Incorporated disclosed in an 8-K filing that its wholly owned subsidiary, Aflac Life Insurance Japan Ltd. ("Aflac Japan"), experienced a cybersecurity incident.
An unauthorized third party accessed certain Aflac Japan systems between June 15 and June 25, 2026. While the investigation is ongoing, the compromised data includes policy details, personal information, and bank account information. Aflac Japan has taken steps to contain the breach and continues to serve its policyholders, though some systems were temporarily suspended.
The incident is confined to Japan, and Aflac's U.S. operations were not affected. The full impact remains unknown, but potential risks include legal, reputational, and financial consequences, as well as regulatory inquiries and litigation.
02—Key points
Key Highlights
- Cybersecurity incident identified at Aflac Japan involving unauthorized third-party access to systems between June 15-25, 2026.
- Compromised data includes policy details, personal information, and bank account information.
- Aflac Japan has notified relevant authorities, including the Japan Financial Services Agency.
- Steps have been taken to contain the incident and prevent further intrusion; some systems were temporarily suspended.
- Aflac Japan continues to serve its policyholders despite the ongoing investigation.
- The incident is strictly limited to Aflac's Japanese operations; U.S. systems were not impacted.
- The company has engaged third-party cybersecurity experts and is conducting an investigation to determine the full scope and impact.
03—Questions
Frequently Asked Questions
What happened at Aflac Japan?
An unauthorized third party gained access to certain Aflac Japan systems between June 15 and June 25, 2026. The company discovered this on June 25, 2026, and has since been investigating the incident.
What kind of information was accessed?
The impacted files contain policy and coverage details, personal information, and bank account information of individuals.
Were Aflac's U.S. operations affected by this breach?
No, the filing explicitly states that the incident is limited to systems in Japan, and Aflac's systems related to its U.S. business were not accessed.
What is Aflac doing in response to the incident?
Aflac Japan has taken steps to contain the incident and suspended certain systems. They have launched an investigation with the help of third-party cybersecurity experts, notified relevant authorities, and intend to notify affected individuals. Aflac Japan is continuing to serve its policyholders.
04—Continue