Aflac

Disclosed Jun 20, 202522,653,844 affectedConfirmed

Aflac hack exposes SSNs and health data of 22.65 million people

Aflac identified unauthorized network access on June 12, 2025 amid Scattered Spider attacks on insurers, and in December said it was notifying about 22.65 million people whose SSNs, ID numbers and medical and insurance data were stolen.

What is known

People affected	22,653,844 (as reported by the organization)
Disclosed	Jun 20, 2025
Discovered	Jun 12, 2025
Happened	Jun 12, 2025
Attack	Hacking
Data exposed	NamesHealthInsuranceDates of birthAddressesGovernment IDsSocial Security numbers
Sector	Insurance · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Aflac

Official noticeatg.wa.gov

Washington Attorney General breach notice: Aflac

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: Aflac

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Aflac

Official noticeocrportal.hhs.gov

HHS OCR breach report: Aflac (Health Plan, GA)

Newstechcrunch.com

US insurance giant Aflac says customers' personal data stolen during cyberattack

Newstechcrunch.com

US insurance giant Aflac says hackers stole personal and health data of 22.6 million people

SEC filingsec.gov

Aflac Form 8-K Item 8.01

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0004744: Aflac

Notices filed

Residents of DEJun 20, 2025

Delaware DOJCount not stated

TotalJun 20, 2025

Research22,650,000 people

TotalJun 20, 2025

SEC 8-K 8.01Count not stated

Residents of WAJul 11, 2025

Washington AG432,025 people

Residents of ORJul 11, 2025

Oregon DOJ1 person

TotalAug 8, 2025

HHS OCR13,924,906 people

Residents of CADec 19, 2025

California AGCount not stated

Residents of TXDec 22, 2025

Texas AG2,055,982 people

Other breaches at Aflac

Breach, details not statedBreach notice filed with the Indiana AG, details not stated.2,635 affectedInsuranceUSMar 1, 2021 Insider breachInsider exposed names and health records. Reported to the HHS archive.1,601 affectedInsuranceUSDec 16, 2019 Hacking breachHacking exposed names and health records. Reported to the California AG.10K affectedInsuranceUSMay 29, 2018 Insider breachInsider exposed names and health records. Reported to the HHS archive.930 affectedInsuranceUSMay 20, 2016 Insider breachInsider exposed names and health records. Reported to the HHS archive.6,166 affectedInsuranceUSMay 15, 2015 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedInsuranceUSJan 15, 2014

History of this record

records2026-09-25

22650000 to 22653844by backfillSource

data_types2026-09-25

["names","health","insurance"] to ["names","health","insurance","dob","addresses","government-id","ssn"]by seedSource

records_basis2026-09-25

hhs to organizationby seedSource

records2026-09-25

13924906 to 22650000by seedSource

summary2026-09-25

empty to Aflac identified unauthorized network access on June 12, 2025 amid Scattered Spider attacks on insurers, and in December said it was notifying about 22.65 million people whose SSNs, ID numbers and medical and insurance data were stolen.by seedSource

title2026-09-25

empty to Aflac hack exposes SSNs and health data of 22.65 million peopleby seedSource

sector2026-09-25

other to insuranceby backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 13924906by backfillSource

data_types2026-09-25

[] to ["names","health","insurance"]by backfillSource

disclosed2026-09-25

2025-07-11 to 2025-06-20by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

disclosed2026-09-25

2025-12-19 to 2025-07-11by backfillSource

discovered2026-09-25

empty to 2025-06-12by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Aflac