Cyberattack on insurance company Aflac

Aflac, one of the largest providers of supplemental insurance in the United States, announced on June 20, 2025, that it had been the victim of a cyberattack that may have compromised its customers' personal data. The incident was detected by its security services on June 12. The company has stated that it is in the early stages of investigating the incident and that, at this time, it cannot determine the impact or the total number of people affected.

The company revealed that a threat actor gained access to its network using social engineering tactics that were part of a coordinated campaign against the insurance industry. However, the company assures that the intrusion was contained within a few hours and that its business operations were not affected.

Aflac's initial investigation, estimates that the potentially compromised files contain insurance claim information, health data, social security numbers, and other personal information of customers, beneficiaries, employees, agents, and others involved with its business in the United States.

While the investigation continues, Aflac is offering potentially affected customers free credit monitoring, identity theft protection, medical fraud protection, and customer service for 24 months. The company has also set up a dedicated hotline for any inquiries.