HackingFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
AFLAC INCORPORATED
bd_d73fac9930b96b8a · schema v1 · pii pii-v1
Full breach record for AFLAC INCORPORATED →Aflac Incorporated reported a security incident detected on June 12, 2025, involving unauthorized access to a limited number of systems. The breach impacted personal information of policyholders, including identity and health data. Aflac contained the incident within hours, notified federal law enforcement, engaged third-party cybersecurity experts, and offered 24 months of credit monitoring and identity theft protection services to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2c6b0987aa912328Washington State AGfiled 2025-07-11(3d gap)Verified
- bd_aca1f25de7072416Oregon State AGfiled 2025-07-11(3d gap)Verified
- bd_914dcca03fa76b50Delaware State AGfiled 2025-06-20(24d gap)Verified
- bd_b044b84c4e40b4a4SEC 8-Kfiled 2025-06-20(24d gap)Verified
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/Consumer%20Letter%20-%20Aflac.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 14, 2025
- Raw hash
- 3f0412c83d322d213586a175d3dcb7a753fed8a0688dbf1bbc01531a54fe894a
Reporting entity
- Name
- AFLAC INCORPORATEDnorm: aflac
- Domain
- aflac.com
Victim entity
- Name
- AFLAC INCORPORATEDnorm: aflac
- Domain
- aflac.com
Incident
- Discovered
- Jun 12, 2025
- Materiality determined
- Dec 4, 2025
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- notify federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.