Now Hacked
EN-GB
Data breach

Aflac cyber intrusion exposes personal data of about 22.7 million people

First reported · Last reported · 26 related reports

US insurer Aflac detected a cyber intrusion on 12 June 2025, and personal data as well as health and insurance-related information of customers, beneficiaries, employees and agents was stolen. The total number affected was later confirmed at about 22.7 million, of whom at least 13.9 million had protected health information compromised. The company said it had not been affected by ransomware and proceeded with notifying victims.

Key facts

Affected organisation
Aflac
Incident type
Data breach
Occurred / detected
2025-06-12
Scale of damage
Personal, health and insurance-related information of about 22.7 million people
Cause / method
External cyber intrusion
Location
United States

If your data was exposed

Exposed dataHealth & medical data

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. Aflac detected a cyber intrusion.
  2. Aflac disclosed that personal data may have been stolen and said it had not been affected by ransomware.
  3. A federal court consolidated class action lawsuits over the Aflac data breach.
  4. Aflac disclosed that about 22.7 million people's information was affected by the incident.
  5. Aflac notified about 22.7 million people that their information had been stolen.
  6. It came to light that protected health information of at least 13.9 million people had been compromised.

26 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.