Breaches and incidentsBriefReported by a reputable outlet, citing the company

Aflac Japan: 4.38 million customers’ policy and bank data accessed

Aflac’s SEC filing (30 Jun) says a third party “unlawfully accessed certain of Aflac Japan’s systems” from 15 to 25 Jun 2026.

Disclosed

What happened

  • Aflac’s SEC filing (30 Jun) says a third party “unlawfully accessed certain of Aflac Japan’s systems” from 15 to 25 Jun 2026; files held policy and coverage details, personal information and bank account information. BleepingComputer’s update gives 4.38 million customers. US systems were not accessed.
  • Root cause: not disclosed.
  • No attacker named.
  • Some systems suspended; outside experts engaged. Separate from Aflac’s 2025 US breach.