Overview

• Aflac detected a cybersecurity breach on June 12 that was contained within hours but may have exposed sensitive customer information.
• Preliminary findings indicate the attacker used social engineering tactics to gain access to Aflac’s network.
• Files under review include claims records, health data, social security numbers and other personal details for U.S. customers, beneficiaries, employees and agents.
• The insurer publicly disclosed the breach on June 20 and has engaged leading third-party cybersecurity experts to support its response.
• Aflac is currently auditing affected files to determine how many individuals were impacted and has not yet released a final tally.