2025-06-20 AFLAC INC Cybersecurity Incident

Page last updated on June 23, 2025

AFLAC INC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-06-20 08:01:13 EDT.

Company Summary

Aflac Insurance Services provides life insurance, consulting, and financial services.

Incident Details

Material: Unknown
Is Breach: TRUE
Records Compromised: Unknown
Data Types Impacted: Claims Data, Health data, Social Security Number

Compromised Date:
Detected Date: 2025-06-12
Disclosure Date: 2025-06-20
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-06-20

AFLAC INC filed an 8-K at 2025-06-20 08:01:13 EDT
Accession Number: 0000004977-25-000128

Item 8.01 Other Events.

On June 12, 2025, Aflac Incorporated, a Georgia corporation (the “Company”), identified unauthorized access to its network. The Company promptly initiated its cybersecurity incident response protocols and believes that it contained the intrusion within hours. The Company’s business remains operational, and its systems were not affected by ransomware. The Company continues to serve its policyholders as it responds to this incident and can underwrite policies, review claims, and otherwise service customers as usual. The Company has engaged leading third-party cybersecurity experts to support the Company’s response to the incident.

The Company has commenced a review of potentially impacted files. That review is in its early stages. The Company is unable to determine the total number of affected individuals until that review is completed. The potentially impacted files contain claims information, health information, social security numbers, and/or other personal information, related to customers, beneficiaries, employees, agents, and other individuals in its U.S. business. The Company anticipates notifying regulators and providing appropriate notifications to individuals affected by this incident. Individuals will be offered free credit monitoring and identity theft protection services.

At this time, the full scope and potential ultimate impact on the Company are not known.

Company Information