Aflac suffers cyberattack affecting personal data of customers and employees

Insurance company Aflac Inc. suffered a cyberattack in which personal data of its customers and employees, as well as claims information and Social Security numbers, were exposed.

Through a release issued Friday, Aflac reported that the attack, "caused by a sophisticated cybercrime group," occurred on June 12, when it detected an intrusion into its systems.

Hours after the alert, the cyberattack was stopped.

"On June 12, 2025, Aflac Incorporated ... identified suspicious activity on our network in the United States. We promptly initiated our cyber incident response protocols and stopped the intrusion within hours," the insurance company explained.

"This attack, like many insurance companies are currently experiencing, was caused by a sophisticated cybercrime group. This was part of a cybercrime campaign against the insurance industry," Aflac added.

The company detailed that "The potentially impacted files contain claims information, health information, social security numbers, and/or other personal information, related to customers, beneficiaries, employees, agents, and other individuals in our U.S. business."

The method the cybercriminals used, Aflac said, was what it called "social engineering," the goal of which is to trick someone into obtaining security information.