Aflac Data Breach Exposes 22M People in Major Cyber Breach

Aflac disclosed a data breach that began on June 12, 2025, in which an advanced cybercrime group exfiltrated personally identifiable information and medical/insurance data for more than 22 million US-based customers, employees, agents, and beneficiaries; the intrusion was contained with external incident response, affected account passwords were reset, Aflac is notifying impacted individuals and offering a two-year CyEx Medical Shield, and a class-action lawsuit has been filed.