Breachesby GlyphAflac
Disclosed Dec 16, 20191,601 affectedConfirmed
AFLAC, the covered entity (CE), reported that a technical error allowed the protected health information (PHI) of 1,601 individuals to be viewable on its online web portal. The PHI involved included names, birthdates, addresses, phone numbers, health insurance information, clinical information, and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative and technical safeguards and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted.
What is known
| People affected | 1,601 (as reported to HHS) |
|---|---|
| Disclosed | Dec 16, 2019 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Aflac
Aflac hack exposes SSNs and health data of 22.65 million peopleHacking exposed names, health records, insurance details, dates of birth, addresses, government IDs and Social Security numbers. Reported to the California AG.Hacking23M affectedInsuranceUSJun 20, 2025Breach, details not statedBreach notice filed with the Indiana AG, details not stated.2,635 affectedInsuranceUSMar 1, 2021Hacking breachHacking exposed names and health records. Reported to the California AG.10K affectedInsuranceUSMay 29, 2018Insider breachInsider exposed names and health records. Reported to the HHS archive.930 affectedInsuranceUSMay 20, 2016Insider breachInsider exposed names and health records. Reported to the HHS archive.6,166 affectedInsuranceUSMay 15, 2015Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedInsuranceUSJan 15, 2014
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.