Industry - Data Breach
Executive Summary
Aflac reported a data breach in Japan affecting approximately 4.38 million customers and insurance agents after attackers accessed its policyholder portal between June 15 and June 25. The compromised information includes personal details, contact information, insurance policy data, and banking records for about 230,000 customers, though no credit card information was exposed. Aflac detected the breach on June 25 following unusual system activity and has engaged cybersecurity specialists to in...
What Happened
Between June 15 and June 25, 2026, attackers gained unauthorized access to Aflac's policyholder portal in Japan, maintaining access for 10 days before detection. Aflac discovered the breach on June 25 after detecting unusual system activity and high CPU load. The company isolated affected systems, engaged cybersecurity specialists, and reported the incident to Japanese authorities and the US Securities and Exchange Commission.
Who Is Affected
Approximately 4.38 million customers and insurance agents in Japan are potentially affected by this breach. The compromised data includes personal details, contact information, insurance policy data, and banking records for about 230,000 customers. Aflac has confirmed that US customer data was not affected by this incident and no credit card information was exposed.
Why It Matters
This breach represents the second major cyberattack on Aflac in two years, following a 2025 incident that affected 22 million US customers, demonstrating persistent targeting of the insurance sector. The 10-day window of unauthorized access before detection highlights detection challenges facing insurers, who increasingly face sophisticated cyberattacks due to the valuable personal and financial data they maintain. The scale of exposure underscores the growing vulnerability of insurance companies as attractive targets for threat actors.
What You Should Do
If you are an Aflac customer or agent in Japan, watch for official notification from the company about whether your specific data was compromised. Monitor your bank accounts and insurance policy statements for any unauthorized activity or changes, particularly if you are among the 230,000 whose banking information was exposed. Contact Aflac directly through official channels if you notice suspicious activity, and consider placing fraud alerts on your financial accounts as a precautionary measure.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources
- Aflac Japan reports data breach affecting over 4 million customers - The Japan Times
- Aflac Japan Data Breach Impacts 4.38 Million - SecurityWeek
- Aflac Japan Data Breach Impacts 4.38 Million Customers and Agents - Security Boulevard
- Insurance Giant Aflac Discloses Data Breach Impacting Millions - Infosecurity Magazine
- Serviceaide Pays $1.8 Million to Settle Data Breach Litigation - The HIPAA Journal
- Greater Rochester Independent Practice Association Settles MOVEit Data Breach Litigation - The HIPAA Journal