Aflac Breach Exposes Data of 22.65 Million People

Aflac Inc., a major U.S. insurance company, disclosed this week that a cyberattack in June 2025 exposed personal and health information belonging to 22.65 million individuals, including customers, employees, and agents. The breach, detected on June 12, involved unauthorized access to portions of the company's network, prompting swift action to isolate affected systems and contain the incident within hours.

The company detected suspicious activity on a limited number of systems and immediately engaged external cybersecurity experts and federal law enforcement to investigate. According to Aflac's statement, no ransomware was deployed, and the attack did not disrupt business operations. Following the incident, the firm secured potentially impacted accounts, reset passwords, and implemented ongoing monitoring for fraudulent activity. Aflac reported no evidence of misuse of the stolen data to date.

The compromised files contained a range of sensitive information, though not all data elements applied to every individual. This included names, dates of birth, contact details, Social Security numbers, government-issued identification numbers such as driver's licenses and passports,...