Aflac Japan Breach Exposes Policyholder Data and Disrupts Services

Aflac disclosed that an unauthorized third party accessed certain systems at Aflac Life Insurance Japan Ltd. between June 15 and June 25, leading to a data breach affecting its policyholder portal and related services. The company said the incident was discovered on June 25, after which it contained parts of the intrusion, suspended some systems, and notified the Japan Financial Services Agency and other relevant authorities while continuing policyholder services where possible.

Aflac said roughly 4.38 million customers and agents were likely affected, with exposed information including names, addresses, phone numbers, dates of birth, gender, security information, and insurance account details. The insurer also said premium transfer bank account information for about 230,000 people was exfiltrated, though no credit card data was accessed; at least five Japan services were disrupted, restoration timelines remain unclear, and the company said the breach was limited to Japan systems and did not affect its U.S. business.