Aflac Data Breach Exposes Personal Information of More Than 22 Million People
What happened, what data was involved, and what you should do next
Aflac has confirmed that a data breach earlier this summer exposed sensitive personal and health information linked to more than 22 million people, making it one of the largest insurance-related breaches in recent years.
The issue was discovered on June 12, when Aflac detected suspicious activity on parts of its U.S. network. The company says it quickly contained the intrusion and brought in third-party cybersecurity experts to investigate. Core systems remained operational, and no ransomware was used, but the scope of exposed data is still significant.
According to Aflac, the compromised information may include names, addresses, Social Security numbers, dates of birth, driver’s license or other government ID numbers, and medical or health insurance details. The breach affected a wide range of individuals, including customers, beneficiaries, employees, agents, and contractors.
At this point, Aflac says it has not seen evidence that the data has been misused. Even so, the company is offering 24 months of free credit monitoring, identity theft protection, and medical fraud monitoring to those impacted.
Aflac has not named the attacker, but described the breach as part of a broader campaign targeting insurance companies. Given how much financial and health data insurers hold, this trend is unlikely to slow down.
What you should do now
If you were affected by the Aflac breach, or any breach like it, there are a few smart steps you can take right away:
First, enroll in any credit or identity monitoring services being offered. They are not perfect, but they do help surface problems early.
Second, keep a close eye on your credit reports, bank accounts, insurance claims, and any unfamiliar mail or calls. Medical identity fraud in particular can take months to surface.
Third, assume your data may already be circulating. Once personal information is exposed, it rarely disappears. It is often copied, resold, and reused long after the initial breach fades from the news.
How Reklaim Protect helps
Breaches like this highlight a bigger issue. Your data is scattered across dozens, sometimes hundreds, of companies you no longer interact with, and many of them quietly retain it for years.
Reklaim Protect helps reduce that risk by continuously finding where your personal data is exposed and taking action to remove it from data brokers and high-risk sources. Instead of reacting after a breach, Protect focuses on shrinking your digital footprint before bad actors can exploit it.
Reklaim Protect: 30 Day Risk Free Trial
