Overview
- Aflac Life Insurance Japan said attackers repeatedly accessed its systems between June 15 and June 25 and that the company discovered the intrusion on June 25, a fact disclosed in a June 30 regulatory filing.
- The company has determined roughly 4.38 million customers and agents had data taken, with types of exposed information including names, addresses, dates of birth, policy details and about 230,000 premium transfer bank account records.
- To stop further access Aflac Japan suspended affected systems including its policyholder portal and several customer services remain offline while recovery work continues.
- Aflac has notified the Japan Financial Services Agency and other authorities, engaged third‑party cybersecurity experts, will send individualized notices to those affected and says its U.S. systems were not accessed and no misuse has been confirmed so far.
- Security analysts say the incident fits a pattern of insurer-targeted intrusions and could increase regulatory scrutiny and fraud risks for customers, so affected people should watch for official letters, monitor bank accounts, and follow Aflac’s guidance.