Aflac Japan Data Breach Affects 4.38 Million Customers

Aflac Japan disclosed a data breach affecting 4.38 million customers after unauthorized access to its systems between June 15 and June 25, 2026. The breach was detected on June 25, prompting the suspension of certain systems while continuing to serve policyholders. The attackers accessed sensitive personal and financial information, including policy details and bank account data. Aflac has engaged external cybersecurity experts for investigation and notified relevant authorities, confirming that U.S. systems were not compromised. The full scope of the breach and its potential impact remain under investigation. This incident follows a previous breach in 2023 attributed to the same threat group, Scattered Spider.

Key Points: • Aflac Japan's systems were breached, affecting 4.38 million customers. • Sensitive data, including personal and bank account information, was accessed. • The breach is confined to Japan, with U.S. systems unaffected.