Aflac Life Insurance Japan policyholder data breach
Add to my breach checkMade public · about 4.4 million customers
What leaked7
Hard to replace
- Bank account number
- Mobile number
- Home or delivery address
- Other profile data
Permanent
- Date of birth
- Full name
- Gender
- Bank account numberpremium payment account (bank, branch, type, number, holder) of about 220,000 customers
- Mobile numberphone number · type not stated
- Full namepolicyholders, insured persons and beneficiaries
- Other profile datapolicy number, coverage, and name, birth date, gender, address and phone of the second contact · a relative or other person
To-dos3 · about 30 min in all
What happened next10 events
- Undetected 2 events15 days · show events
- Response 7 eventsNotice in 15 days · show events
- RemedyNone on record
- Penalty 1 eventUnder investigation · show events
- DisputesNone on record
- Reported its findings and prevention measures to the Financial Services Agency
- Second report: first leak date moved to June 10, 2026 and count updated to about 4.4 million customers
- Started sending letters to affected customers; finished on July 30, 2026
- Ordered Aflac to report under the Insurance Business Act and the personal data law
- No misuse of the leaked data confirmed as of the announcement
5 more
- By the announcement, reported to the Financial Services Agency, the police and other bodies
- Announced the breach: about 4.38 million customers
- Stopped the related systems to stop the leak spreading
- Detected high CPU load at 06:30 JST and found unauthorised access
- Intrusion began
- Company
- Aflac Life Insurance Japan
- When it happened
- –
- Company detected it
- Made public
- Notice
- Leak confirmed
- Affected
- about 4.4 million customers · approx.; Aflac's figure as reported by the press, about 220,000 of them with premium payment account data; also about 40,000 agencies
How the facts developed
- Second report: first leak date corrected from June 15, 2026 to June 10, 2026, count updated from about 4.38 million to about 4.4 million customers (press)
Sources
- Impress Watch press (opens in a new tab)checked November 6, 2026
- セキュリティ対策Lab press (opens in a new tab)checked November 6, 2026
- ScanNetSecurity press (opens in a new tab)checked November 6, 2026