At a Glance
- Aflac disclosed a breach that exposed 22.65 million people’s personal data.
- The leak included Social Security numbers and health insurance information.
- The insurer offered 24 free months of CyEx cybersecurity services to affected customers.
- Why it matters: Millions of policyholders may face identity theft risks and need to monitor their accounts.
In December, insurance giant Aflac announced that a data breach first reported in June had compromised the personal information of 22.65 million people. The company said the exposed data included Social Security numbers, health insurance details, and other sensitive customer records.
The Breach Details
Aflac confirmed that files containing personal data related to customers, beneficiaries, and employees may have included contact information, claims, health information, and Social Security numbers. The breach was identified in June and detailed in a December update. The company said it addressed the incident within hours and began notifying affected parties shortly thereafter.
- Contact information
- Claims data
- Health information
- Social Security numbers
Company Response
Aflac has offered customers a range of protective services and stated that it is not aware of any fraudulent use of the compromised data. The insurer’s press release emphasized ongoing monitoring with third-party partners.
Aflac representative stated:
> “To date, Aflac is not aware of any fraudulent use of personal information and — along with third-party partners — will continue to monitor any fraudulent activity,” said.
A representative told News Of Fort Worth the company has no further comment beyond what it has posted on its website.
- 24 free months of CyEx cybersecurity services
- Credit monitoring
- Medical information protection
- Identity theft monitoring
| Event | Date | Action |
|---|---|---|
| Breach identified | June | Data compromise discovered |
| Public disclosure | December | Company released update |
| Customer notification | December | Began notifying affected individuals |
| Protective services offered | December | 24 free months of CyEx services |
Cybercriminals frequently target insurers and related businesses for personal data. Aflac’s response aligns with industry practices for mitigating breach impacts and protecting customers.
Key Takeaways
- 22.65 million people’s data, including SSNs, were exposed.
- Aflac is offering free cybersecurity services for a year.
- No fraudulent activity has been reported to date, but customers should remain vigilant.
Policyholders should review the PDF on Aflac’s website and consider enrolling in the offered monitoring programs. Staying alert to phishing attempts and securing passwords remains essential.
