Key facts
- Aflac Japan suffered a data breach impacting 4.38 million customers.
- Personal information and some bank account details were leaked.
- The breach occurred between June 15 and June 25, 2026.
- The incident is confined to Aflac's Japanese subsidiary systems.
- Aflac Japan has alerted Japanese authorities and plans to notify affected individuals.
Aflac Life Insurance Japan has disclosed a significant data breach that exposed the personal information and some bank account details of approximately 4.38 million customers. The intrusion into Aflac Japan's systems occurred between June 15 and June 25, 2026, with the breach discovered on June 25. The company has suspended certain systems to contain the incident and is working with external cybersecurity experts to investigate.
Impacted files are confirmed to contain policy and coverage details, personal information, and bank account information, including premium payment account details for about 230,000 customers. Aflac Japan has stated that the incident is strictly limited to its Japanese operations, and no access to the company's U.S. business systems has been detected. The company has notified the Japan Financial Services Agency and other relevant authorities and intends to inform all affected individuals.
This is not the first security incident for Aflac Japan, which experienced a data breach in 2023 involving a third-party contractor and another incident a year prior, both potentially linked to the Scattered Spider threat group. Despite the breach, Aflac Japan continues to handle inquiries and claims as usual through its call center and other channels, though some services like medical check-up reservations and AI support are temporarily unavailable.