Loading story…
Aflac disclosed that an unauthorized third party accessed certain systems at Aflac Life Insurance Japan Ltd. between June 15 and June 25, leading to a data breach affecting its policyholder portal and related services. The company said the incident was discovered on June 25, after which it contained parts of the intrusion, suspended some systems, and notified the Japan Financial Services Agency and other relevant authorities while continuing policyholder services where possible.
Aflac said roughly 4.38 million customers and agents were likely affected, with exposed information including names, addresses, phone numbers, dates of birth, gender, security information, and insurance account details. The insurer also said premium transfer bank account information for about 230,000 people was exfiltrated, though no credit card data was accessed; at least five Japan services were disrupted, restoration timelines remain unclear, and the company said the breach was limited to Japan systems and did not affect its U.S. business.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
On June 30, 2026, Aflac disclosed the data breach affecting Aflac Life Insurance Japan and said approximately 4.38 million customers and agents were likely affected. The company said exposed data included personal and insurance account information, with premium transfer account information for roughly 230,000 people also exfiltrated, and notified Japanese authorities.
On June 25, 2026, Aflac Japan discovered the intrusion and responded by containing parts of the incident and suspending certain systems. The company said at least five services were disrupted while policyholder services continued during the investigation.
Aflac Life Insurance Japan said an unauthorized third party accessed certain company systems starting on June 15, 2026. The intrusion affected systems tied to its policyholder portal and was later found to involve theft of personal information.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
7 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourceteiss.co.uk
Open sourcesecurityaffairs.com
Open sourcesecurityweek.com
Open sourcebleepingcomputer.com
Open sourcesec.gov
Open sourceaflac.co.jp
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Aflac Life Insurance Japan disclosed that an unauthorized third party accessed its systems between June 15 and June 25, exposing data tied to about **4.38 million customers**. The company said the compromised information included names, dates of birth, addresses, phone numbers, policy coverage details, and data related to insurance representatives and commercial agencies; roughly **230,000 records** also contained bank account information. Aflac said the incident was limited to its Japan operations, that U.S. business systems were not accessed, and that affected systems were suspended after the intrusion was discovered on June 25. The breach adds to a broader pattern of cyber incidents affecting Japanese organizations, where public reporting has shown hundreds of ransomware and extortion-related cases and frequent abuse of internet-facing systems such as VPN appliances and RDP. Research on disclosed incidents involving Japanese firms found that attackers often move quickly to leak or weaponize stolen data and increasingly time disruptive actions for nights or weekends, underscoring the operational pressure facing defenders. Aflac said it has brought in third-party cybersecurity experts and notified Japan’s Financial Services Agency and police, while stating that no confirmed misuse of the stolen data had been identified at the time of disclosure.
Jul 7, 2026
Aflac, the largest U.S. supplemental health insurance provider, has notified 22.65 million individuals that their sensitive health and personal information, including Social Security numbers, may have been compromised in a major data breach that occurred in June 2025. The incident, which Aflac described as part of a "sophisticated cybercrime campaign" targeting the insurance industry, is expected to be the largest health data breach reported to U.S. federal regulators in 2025 once official numbers are updated on the Department of Health and Human Services' HIPAA Breach Reporting Tool. Security researchers have speculated that the cybercriminal group Scattered Spider may be responsible for the attack, which coincided with similar incidents affecting other large U.S. insurers. Aflac initially reported the breach to the HHS Office for Civil Rights with a placeholder estimate of 500 affected individuals, but the updated figure of 22.65 million significantly increases the scale and impact of the incident. The breach highlights ongoing threats to the insurance sector and the potential for large-scale exposure of sensitive health data.
Jun 29, 2026
American Family Insurance confirmed that a cyberattack caused widespread IT outages after customers reported problems accessing systems and services. The insurer said it detected unauthorized activity in its network and took systems offline as part of containment and response efforts, disrupting parts of its business while it worked to investigate the intrusion and restore operations. Aflac later disclosed a separate cybersecurity incident affecting its environment, adding to concerns about cyber risk across the insurance sector. The company said it had activated incident response procedures and was assessing the scope and impact of the breach, while both disclosures underscored how attacks on major insurers can interrupt customer-facing services and trigger prolonged forensic and recovery efforts.
Jul 10, 2026