Aflac discloses cybersecurity incident

Aflac disclosed that it identified suspicious activity on its U.S. network on June 12, 2025, prompting the company to activate its cyber response protocols. The intrusion was contained within hours, and no ransomware was involved. Business operations remain unaffected, including underwriting and claims handling.

The attack, linked to a broader campaign targeting the insurance sector, involved social engineering tactics. Aflac has engaged external cybersecurity experts and begun reviewing potentially impacted files, which may include sensitive customer, agent, and employee data such as SSNs and health information.

While the full scope is still under investigation, Aflac is offering affected individuals free credit monitoring, identity theft protection, and Medical Shield for 24 months. A dedicated call center will open June 20 to support inquiries.

The report comes as Erie and Philadelphia Insurance are also addressing unusual activity.