Aflac Japan data breach affects 4.38 million customers

As reported by Security Affairs, Aflac Japan has confirmed a significant data breach impacting approximately 4.38 million customers and agents, following unauthorized access to its systems over a 10-day period.

Hackers gained access to Aflac Japan's systems between June 15 and June 25, stealing personal information from the company's policyholder portal. The compromised data includes names, addresses, phone numbers, dates of birth, gender, security details, and insurance account information, with the specific data varying by customer. Aflac Japan has suspended affected systems to contain the breach, which is confirmed to be isolated to its Japanese operations and does not impact U.S. activities. Some customer services remain unavailable during recovery efforts.

The company is working with third-party cybersecurity experts to investigate the incident and has notified Japanese financial authorities. Affected individuals will be notified by mail. This incident places Aflac among other insurance companies, such as Allianz Life, that have experienced recent cyberattacks, with some linked to the Scattered Spider cybercrime group.

Source: Security Affairs