Aflac data breach
Was I affected?
Aflac confirmed a breach affecting about 22.6 million people, exposing names, addresses, dates of birth and Social Security numbers. You may be affected if you hold or are a beneficiary on an Aflac policy, or worked as an Aflac employee or agent, and received a notice in late 2025.
| Announced | Jun 20, 2025 |
|---|---|
| When it happened | June 2025 (detected June 12) |
| People affected | 22.6 million |
| Data exposed | Names, Addresses, Dates of birth, Social Security numbers, Driver's license numbers, Passport numbers, Medical information and Health insurance details |
| Status | Confirmed by the company or a regulator filing |
What happened
Supplemental insurer Aflac disclosed in June 2025 that attackers had stolen files from its US network as part of a wave of attacks on insurers. After its review, Aflac said in December 2025 that about 22.65 million customers, beneficiaries, employees and agents were affected, with Social Security numbers, government ID numbers, birth dates, addresses and medical and insurance information exposed. Researchers linked the campaign to Scattered Spider; Aflac did not confirm the group.
What should I do?
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Enroll in the 24 months of credit, identity and medical-fraud monitoring Aflac offered.
- Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
- Read every Explanation of Benefits from your health insurer and report any visit, test or prescription you never had.
Check the other services you use →
Sources
- US insurance giant Aflac says hackers stole personal data of 22.6 million · TechCrunch (news)
- 22 million affected by Aflac data breach · SecurityWeek (news)