AFLAC INCORPORATED
12 disclosures across 12 jurisdictions · 2025-06-20 → 2025-12-22. Severity score: 12 across 3 incidents (max per incident: crit=4 high=3 med=2 low=1; per-filing sum: 33).
1825-day window · this entity as victim
none in window
of 3 clock verdicts
max per incident · per-filing sum: 33
Sector context · Finance
- This entity:
- 100.0% on-time (n=3 clock verdicts)
- Sector cohort:
- 25.7% on-time (n=2,334 clock verdicts)
Cohort: 6,577 filings from 2,122 organisations carrying NAICS 52 on the filing itself, same 1825-day window; merged entities counted once. Both percentages count clock verdicts through the same registry — a filing with no evaluable clock is excluded from both rather than counted as on time.
Compliance timing by regulator
Notice timing computed from the dates recorded in each filing — an indicative estimate from an automated clock, not a legal determination. Click any chip for this entity's source filings.
- HIPAA0 on-time · 0 late · 1 informational · 1
- Washington1 on-time · 0 late · 1
- Texas1 on-time · 0 late · 1 informational · 2
- Iowa1 on-time · 0 late · 1
- South Carolina0 on-time · 0 late · 1 informational · 1
us-ca — clock not computable from the dates recorded in the filings
us-de — no notification-clock framework implemented for this jurisdiction
us-federal — clock not computable from the dates recorded in the filings
us-il — no notification-clock framework implemented for this jurisdiction
us-mt — no notification-clock framework implemented for this jurisdiction
us-or — clock not computable from the dates recorded in the filings
us-ri — clock not computable from the dates recorded in the filings
Discovery dates behind these clocks: 2 ag web form · 3 letter-grounded · 4 occurrence date · 1 unattributed. Only a date the notification letter itself states is fully defensible; a date derived from another field makes the verdict indicative.
Regulators holding filings from this entity
Every regulator that has received a visible filing naming this entity, all time — filings first.
- Massachusetts State AG (7)
- HHS OCR (5)
- Illinois State AG (5)
- SEC 8-K (1)
- California State AG (1)
- Delaware State AG (1)
- Iowa State AG (1)
- Indiana State AG (1)
- Montana State AG (1)
- New Hampshire State AG (1)
- Oregon State AG (1)
- Rhode Island State AG (1)
- South Carolina State AG (1)
- Texas State AG (1)
- Washington State AG (1)
SEC-registered (CIK 0000004977). SEC cyber filings on record in this corpus: 1. Materiality under Item 1.05 is the registrant's own determination; the absence of a filing is a fact about this corpus, not a finding about any obligation.
Breach History (5-Year Lookback)
Historical incident recurrence, cumulative exposure, and per-jurisdiction compliance record
within lookback window
late notice filings
median days between incidents
Per-jurisdiction compliance record
| Jurisdiction | On-time | Late | Rate |
|---|---|---|---|
| us-ga | 0 | 0 | — |
| us-ia | 1 | 0 | 100% |
| us-sc | 0 | 0 | — |
| us-tx | 1 | 0 | 100% |
| us-wa | 1 | 0 | 100% |
Cumulative data type exposure
Disclosure timeline
Most-recent 100 filings. Click a row to open the disclosure detail.
| Filed | Source | Jurisdiction | Severity | Affected | Clocks missed |
|---|---|---|---|---|---|
| 2025-12-22 | state_ag | us-tx | Critical | 22.7M | |
| 2025-12-19 | state_ag | us-ca | Low | — | |
| 2025-12-19 | state_ag | us-ri | High | 61.9Kstate | |
| 2025-12-19 | state_ag | us-mt | High | 118.5Kstate | |
| 2025-12-19 | state_ag | us-ia | Critical | 239.1Kstate | |
| 2025-08-08 | ocr | us-ga | Critical | 13.9M | |
| 2025-07-14 | state_ag | us-sc | Critical | 363.8Kstate | |
| 2025-07-11 | state_ag | us-wa | Critical | 432.0Kstate | |
| 2025-07-11 | state_ag | us-or | Low | 1 | |
| 2025-07-01 | state_ag | us-il | Medium | — | |
| 2025-06-20 | state_ag | us-de | Low | — | |
| 2025-06-20 | sec_8k | us-federal | Medium | — |