Aflac notified California residents of possible unauthorized access to Microsoft Office 365 email accounts of sales agents between September 8, 2017, and May 9, 2018. Affected data may include names, addresses, dates of birth, policy numbers, social security numbers, and general health information. Aflac engaged third-party experts, reset passwords, isolated accounts, and offered one year of credit monitoring.