Aflac Notifies 22.6 Million People of June Data Theft Attack

Insurer's Hack Could Rank as Largest US Health Data Breach Reported in 2025 Marianne Kolbasuk McGee (HealthInfoSec) • January 2, 2026

Aflac, the largest U.S. supplemental health insurance provider, is notifying 22.65 million people whose sensitive health and personal information, including Social Security numbers, was potentially compromised in a June data theft incident.

See Also: Going Beyond the Copilot Pilot - A CISO's Perspective

As of Friday, Aflac's count for the number of people affected by the breach was not yet posted on the U.S. Department of Health and Human Services' HIPAA Breach Reporting Tool website, which lists health data breaches affecting 500 or more individuals. Aflac submitted a HIPAA breach report about the incident to HHS' Office for Civil Rights in August with a ...