Skip to content

Aflac

7 breaches23M affected in allInsuranceaflac.com

BreachAffected
Aflac hack exposes SSNs and health data of 22.65 million peopleJun 20, 20251 year agoHacking23M
Disclosed Mar 1, 2021Mar 1, 20215 years ago2,635
Disclosed Dec 16, 2019Dec 16, 20196 years agoInsider1,601
Disclosed May 29, 2018May 29, 20188 years agoHacking10K
Disclosed May 20, 2016May 20, 201610 years agoInsider930
Disclosed May 15, 2015May 15, 201511 years agoInsider6,166
Disclosed Jan 15, 2014Jan 15, 201412 years ago1
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · Aflac, 2015-05-15 · attack: insider
  • 2026-09-25 · Aflac, 2015-05-15 · data_types: ["names","health"]
  • 2026-09-25 · Aflac, 2015-05-15 · records_basis: hhs
  • 2026-09-25 · Aflac, 2015-05-15 · records: 6166
  • 2026-09-25 · Aflac, 2015-05-15 · disclosed: 2015-05-15
  • 2026-09-25 · Aflac, 2015-05-15 · summary: Some of the covered entity’s (CE) policyholders erroneously received welcome packets in the mail that contained the protected health information (PHI) of other individuals on a summary page. The breach affected 6,166 individuals and the typ
  • 2026-09-25 · Aflac, 2016-05-20 · attack: insider
  • 2026-09-25 · Aflac, 2016-05-20 · data_types: ["names","health"]
  • 2026-09-25 · Aflac, 2016-05-20 · records_basis: hhs
  • 2026-09-25 · Aflac, 2016-05-20 · records: 930
  • 2026-09-25 · Aflac, 2016-05-20 · disclosed: 2016-05-20
  • 2026-09-25 · Aflac, 2016-05-20 · summary: Due to a vendor error, the covered entity (CE), Aflac, erroneously sent correspondence containing protected health information (PHI) to the wrong customers, affecting 930 policyholders. The types of PHI included names, policy numbers, types
  • 2026-09-25 · Aflac, 2018-05-29 · attack: hacking
  • 2026-09-25 · Aflac, 2018-05-29 · data_types: ["names","health"]
  • 2026-09-25 · Aflac, 2018-05-29 · records_basis: hhs
  • 2026-09-25 · Aflac, 2018-05-29 · records: 10396
  • 2026-09-25 · Aflac, 2018-05-29 · disclosed: 2018-05-29
  • 2026-09-25 · Aflac, 2018-05-29 · summary: AFLAC, the covered entity (CE), reported that multiple business associates (BA) were victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 4,186 individuals. The ePHI involved included names
  • 2026-09-25 · Aflac, 2019-12-16 · added
  • 2026-09-25 · Aflac, 2014-01-15 · added
  • 2026-09-25 · Aflac, 2015-05-15 · disclosed: 2015-07-15
  • 2026-09-25 · Aflac, 2015-05-15 · records: 297
  • 2026-09-25 · Aflac, 2015-05-15 · disclosed: 2015-10-19
  • 2026-09-25 · Aflac, 2015-05-15 · disclosed: 2015-11-10
  • 2026-09-25 · Aflac, 2015-05-15 · added
  • 2026-09-25 · Aflac, 2016-05-20 · added
  • 2026-09-25 · Aflac, 2018-05-29 · sector: insurance
  • 2026-09-25 · Aflac, 2018-05-29 · records_basis: organization
  • 2026-09-25 · Aflac, 2018-05-29 · records: 7366
  • 2026-09-25 · Aflac, 2021-03-01 · added

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.