The article describes a data breach at Aflac Japan involving unauthorized access to its policyholder portal systems over a 10-day period, resulting in the theft of extensive personal and insurance data for 4.38 million customers. The specific attack vector or vulnerability exploited was not detailed in the provided text. The breach was isolated to Aflac's Japanese operations, and the company has suspended affected systems while engaging third-party experts for investigation and recovery.
Breach Aflac Japan data breach affects 4.38 million customers July 2, 2026 Share By SC Staff (Adobe Stock) As reported by Security Affairs, Aflac Japan has confirmed a significant data breach impacting approximately 4.38 million customers and agents, following unauthorized access to its systems over a 10-day period. Hackers gained access to Aflac Japan's systems between June 15 and June 25, stealing personal information from the company's policyholder portal. The compromised data includes names, addresses, phone numbers, dates of birth, gender, security details, and insurance account information, with the specific data varying by customer. Aflac Japan has suspended affected systems to contain the breach, which is confirmed to be isolated to its Japanese operations and does not impact U.S. activities. Some customer services remain unavailable during recovery efforts. The company is working with third-party cybersecurity experts to investigate the incident and has notified Japanese financial authorities. Affected individuals will be notified by mail. This incident places Aflac among other insurance companies, such as Allianz Life, that have experienced recent cyberattacks, with some linked to the Scattered Spider cybercrime group. Source: Security Affairs SC Staff Related Breach Nissan confirms employee data exposed in Oracle PeopleSoft cyberattack SC Staff June 29, 2026 Nissan Americas disclosed in a filing to the California Attorney General that a cyber event involving Oracle's personnel records led to the potential theft of payroll information, bank details, and Social Security numbers. Breach KDDI discloses data breach affecting up to 14.2 million customers SC Staff June 29, 2026 The breach occurred when threat actors exploited a vulnerability in third-party software used by KDDI. Breach Xsolis breach exposes personal and health data of 1.4 million people SC Staff June 23, 2026 The security incident, which occurred on January 20, 2026, allowed an unauthorized actor to acquire files containing sensitive information. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Attack Vector You can skip this ad in 5 seconds