Summary
Aflac Incorporated disclosed in an 8-K filing that its wholly owned subsidiary, Aflac Life Insurance Japan Ltd. ("Aflac Japan"), experienced a cybersecurity incident. An unauthorized third party accessed certain Aflac Japan systems between June 15 and June 25, 2026. While the investigation is ongoing, the compromised data includes policy details, personal information, and bank account information. Aflac Japan has taken steps to contain the breach and continues to serve its policyholders, though some systems were temporarily suspended. The incident is confined to Japan, and Aflac's U.S. operations were not affected. The full impact remains unknown, but potential risks include legal, reputational, and financial consequences, as well as regulatory inquiries and litigation.
Key Highlights
- 1Cybersecurity incident identified at Aflac Japan involving unauthorized third-party access to systems between June 15-25, 2026.
- 2Compromised data includes policy details, personal information, and bank account information.
- 3Aflac Japan has notified relevant authorities, including the Japan Financial Services Agency.
- 4Steps have been taken to contain the incident and prevent further intrusion; some systems were temporarily suspended.
- 5Aflac Japan continues to serve its policyholders despite the ongoing investigation.
- 6The incident is strictly limited to Aflac's Japanese operations; U.S. systems were not impacted.
- 7The company has engaged third-party cybersecurity experts and is conducting an investigation to determine the full scope and impact.