FEDERALItem 8.01 · voluntaryHackingDelayed DiscoveryCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICMediumContained
AFLAC INCORPORATED
bd_b044b84c4e40b4a4 · schema v1 · pii pii-v1
Full breach record for AFLAC INCORPORATED →Aflac Incorporated (CIK 0000004977) filed an 8-K on June 20, 2025, reporting unauthorized network access identified on June 12, 2025. The company contained the intrusion within hours, confirmed no ransomware was involved, and engaged third-party cybersecurity experts. The investigation into the scope is ongoing, but potentially impacted files include claims data, health information, and Social Security Numbers for customers, employees, and agents in the U.S. Free credit monitoring is being offered.
SEC clockMateriality determined Jun 20, 2025 → Filed Jun 20, 20250d ✓ SEC 4-day OK8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_914dcca03fa76b50Delaware State AGfiled 2025-06-20Verified
- bd_2c6b0987aa912328Washington State AGfiled 2025-07-11(21d gap)Verified
- bd_aca1f25de7072416Oregon State AGfiled 2025-07-11(21d gap)Verified
- bd_d73fac9930b96b8aSouth Carolina State AGfiled 2025-07-14(24d gap)Verified
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/4977/000000497725000128/afl-20250620.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jun 20, 2025
- Raw hash
- c4b9fb3d75724c1efb704e226d941c6fd73305cd1068bc1ddcd6163ab6ca5d34
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- AFLAC INCORPORATEDnorm: aflac
- SEC CIK
- 0000004977
- Domain
- aflac.com
Victim entity
- Name
- AFLAC INCORPORATEDnorm: aflac
- SEC CIK
- 0000004977
- Domain
- aflac.com
Incident
- Discovered
- Jun 12, 2025
- Materiality determined
- Jun 20, 2025
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Jun 20, 2025→ Filed: Jun 20, 20250d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.