Aflac says an unauthorized actor obtained personal information from systems in its U.S. business, affecting approximately 22.65 million people. The intrusion was detected on June 12, 2025, but the company announced the affected population in December. The group includes customers, beneficiaries, employees, agents and others—not just current policyholders. Aflac’s stated deadline to enroll in its free breach-response services was April 18, 2026, so that offer has expired unless the company has separately reopened it.
What happened in the Aflac breach?
Aflac detected suspicious activity and unauthorized access in a limited number of systems in its U.S. business on June 12, 2025. The company said an unauthorized actor obtained information from files. Aflac reported that it contained the intrusion within hours, engaged outside cybersecurity experts and notified federal law enforcement. Its initial disclosure is in Aflac’s June 2025 SEC filing.
Aflac later said its systems were not affected by ransomware. Containment within hours does not mean no information was taken: the company separately disclosed that files containing personal information were involved. Aflac said it was not aware of fraudulent use of the information when it updated the public, but that is not proof that misuse did not occur.
How many people were affected, and who were they?
Aflac put the affected population at approximately 22.65 million individuals. Calling them all “customers” is inaccurate: the company said the group included customers, beneficiaries, employees, agents and other people connected with its U.S. business. A person may therefore receive a legitimate notice even if they do not have an active Aflac policy. See Aflac’s December 19, 2025 update.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →#1 Best Overall
- SHIELD YOUR PRIVACY WITH THE ID DEFENDER ROLLER STAMP: Tired of worrying about your personal information falling into the wrong hands? The ID Defender Roller Stamp offers a simple yet effective solution. With a unique wide camouflage pattern, it quickly and easily conceals sensitive data on a variety of surfaces.
- PRIVACY PROTECTION: useful not only as an ADDRESS BLOCKER or ID POLICE, but also keeps away preying eyes from invoices, authority documents, checks, bank statements and many more.
- SIMPLE TO USE: Just remove the cover and swipe. The wide swipe makes it easy to cover sensitive information.
- VERSATILE APPLICATION: Ideal for a variety of documents, including contracts, court documents, shipping labels, tax returns and more.
- LONG-LASTING INK: The high-quality ink works on both glossy and standard paper and provides up to 330 feet of coverage.
What information may have been exposed?
Aflac identified names, contact information, claims information, health information, Social Security numbers and other personal information among the data involved. The combination differed by person; Aflac said not every data element was present for every individual. The overall figure does not show which information was involved for a particular person.
“Health information” and “claims information” do not establish that complete medical records, diagnoses or treatment histories were taken. Aflac’s public notice does not establish that every affected person had health information or a Social Security number in the files. Check your individual notification for the categories Aflac associated with you. The company’s incident notice describes the categories and its response.
Rank #2
- Protect Your Privacy Effectively: you can use this identity protection roller stamp to flip personal information in under 2 seconds and save time and effort, effectively hiding and protecting your personal information, such as phone numbers, social security numbers, bank statements, shipping addresses, tax documents,data, billing addresses and many more
- Ideal Replacement for Shredder: if you are still using a shredder to shred cards or papers that are printed with your personal information, this security stamper roller will be an alternative tool to block out your privacy effectively and easily
- Refillable and Long Term Use: this confidential stamp can cover a total length of up to 100 meter/ 109 yards, approximately 3,200 prints are covered, pattern width is about 0.78 inches; When ink runs out, you can refill the security stamp with ink
- Easy to Use: just continuous roll the address blocker roller stamp to conceal information, and roll on a second layer for maximum protection, works on paper, envelopes, folders, address labels, etc., please note that may not work on smooth surfaces
- How to Refill the Ink: there are 4 pieces of ID stamp refills, each is about 1.5 ml, you just need to unscrew the cap of the ink bottle (not disposable, you can close the cap for next time of use), then insert it into the hole on the side of the stamp, then turn it upside down, about 5 minutes later, the most of the ink will be replenished to the security roller stamp
What is known—and not known—about the attacker?
Aflac’s public disclosures describe an unauthorized actor but do not identify a person or group, explain the initial access method, or establish whether the information was published or sold. They do not attribute the incident to a particular vulnerability, phishing campaign, credential theft or third-party connection. Do not treat unverified claims about a named group or a specific attack method as confirmed.
Aflac said it determined on December 4, 2025, that potentially affected files likely contained information requiring legally mandated notices. It announced the approximately 22.65 million figure on December 19. Discovering suspicious activity, containing access, reviewing files, identifying people and determining notification obligations are separate steps; the later public count does not by itself establish why the investigation took as long as it did or prove misconduct.
Recommended Free Tools
Rank #3
- The id defender roller is the ultimate tool for guarding your personal data at home or in the office. Prevent identity theft by quickly masking sensitive information on mail, documents, or labels, giving you confidence that your details remain private and secure with Vantamo id theft protection.
- Effortlessly block out sensitive text with the label cover up identity protection, designed for quick, one-handed use. No more scraping off all shipping labels or doing a lot of swipes with a marker! Even first-time users will find the process intuitive and straightforward, making it a practical label eraser roller for anyone!
- Vantamo wide rolling privacy marker is fully refillable and arrives with 6 ink refill for self inking stamps ensuring lasting performance. Don't run out when you need it the most. The ink is specially designed for hiding information.
- Our address blackout stamp not only protects your privacy but also helps the environment. After using the roller on your documents, the paper is ready to be safely recycled, making this address eraser a smart alternative to shredding or tossing documents.
- Here at Vantamo, we are creating products that people love! We are committed to providing excellent customer service on every black out stamp. If you ever have questions or concerns, our team is here to help, ensuring your id defender delivers reliable protection and peace of mind every time.
Aflac breach timeline
| Date | What Aflac reported |
|---|---|
| June 12, 2025 | Aflac detected suspicious activity and unauthorized access in a limited number of U.S. systems. |
| December 4, 2025 | Aflac determined that potentially affected files likely contained information triggering notification obligations. |
| December 19, 2025 | Aflac disclosed that approximately 22.65 million individuals were involved. |
| March 31, 2026 | Aflac reported that notifications to affected individuals and regulatory authorities had been completed, according to its quarterly SEC filing. |
| April 18, 2026 | The enrollment deadline Aflac stated for its offered monitoring and protection services. |
What to do if you may be affected
Aflac’s stated enrollment window for its free services has passed. The company offered 24 months of credit monitoring, identity-theft protection and CyEx Medical Shield, but do not assume enrollment is still available. Contact Aflac through a phone number or website you independently verify to ask whether assistance remains available or whether you should have received a notice.
Protect your credit and identity
- Place a credit freeze. Contact Equifax, Experian and TransUnion individually. A freeze is free and restricts access to your credit file for many new-credit applications. You can lift it when you need to apply for credit, insurance or utilities.
- Consider a one-year fraud alert. You can request one through one of the three nationwide credit bureaus; the bureau you contact must notify the others. A fraud alert asks creditors to take steps to verify your identity, but it does not block access to your report like a freeze.
- Review your credit reports. Look for unfamiliar accounts, inquiries and address changes. Monitoring can help you spot problems, but it does not prevent all forms of fraud.
Watch insurance, medical and online accounts
- Review insurance explanations of benefits, claims, bills, prescription activity and coverage changes for services you do not recognize. Ask your insurer or provider how to challenge an unfamiliar claim or record.
- Change passwords you reused, starting with email, financial, insurance and health accounts. Turn on multifactor authentication where available.
- Be cautious with unexpected calls, texts or emails claiming to be from Aflac or offering breach assistance. Do not provide a Social Security number, password, payment details or verification code in response to unsolicited outreach; use contact information you find independently.
If you find signs of identity theft
Report suspected identity theft through the Federal Trade Commission’s IdentityTheft.gov portal and follow its recovery steps. Keep copies of the Aflac notice, correspondence, bills and reports related to suspected fraud. A suspicious message or incident after the breach is not, by itself, proof that Aflac data caused it.
Rank #4
- Personal Information Protection: there are 4 pieces of address blocker roller stamps in 2 different sizes, and 5 pieces of 1.5 ml inks, a total of 9 pieces. Mainly applied to hide information such as social security numbers, bank statements, billing addresses, shipping addresses, tax documents and so on, protecting your personal information
- Re Inking Unlimitedly: the information blocker stamp can cover information of the length about 100 meters. And each security stamper roller has an oil hole, so you don't have to worry about you having to throw away the roller stamps when the ink runs out. They can be refilled with oil for repeated use, saving time and energy
- Cover Fast: our identity protection rollers come in 2 different sizes, and you can choose different sizes according to different areas of information to cover large amounts of private information in a fast and clean way, avoiding identity theft and rejecting privacy disclosure harassment
- Easy to Use: just remove the lid on the ID stamp blocker roller and open it, and then gently slide it on the place where the information needs to be covered. It is suitable for most ordinary paper with black words, and can protect your personal privacy in time
- Save Time and Energy: compared with the shredder, the personal confidential stamp has a small size, easy to carry, can be applied anytime and anywhere. Compared to the marker, it covers a larger area and can be quickly covered with a single swipe. There is no need to worry about whether you can not protect your privacy in time
What the expired monitoring deadline means
Aflac’s incident notice set April 18, 2026, as the deadline to enroll in its offered 24-month services. That date has passed. Ask Aflac through official channels whether it has extended or reopened enrollment; the public deadline alone does not establish that an exception is available. Credit freezes and the other steps above remain available regardless of the company’s offer.
What Aflac said about financial impact
In its 2025 Form 10-K, Aflac said it did not believe the incident was reasonably likely to have a material impact on its financial condition or results of operations based on information then available. The company also said it was assessing costs, including incident response, monitoring services, legal and regulatory expenses, possible litigation and insurance coverage. This is Aflac’s assessment of corporate financial impact, not a finding that individuals faced no risk or suffered no harm. See the Aflac 2025 Form 10-K.
Quick Recap
Best Value
- Personal Information Protection: there are 4 pieces of address blocker roller stamps in 2 different sizes, and 5 pieces of 1.5 ml inks, a total of 9 pieces. Mainly applied to hide information such as social security numbers, bank statements, billing addresses, shipping addresses, tax documents and so on, protecting your personal information
- Re Inking Unlimitedly: the information blocker stamp can cover information of the length about 100 meters. And each security stamper roller has an oil hole, so you don't have to worry about you having to throw away the roller stamps when the ink runs out. They can be refilled with oil for repeated use, saving time and energy
- Cover Fast: our identity protection rollers come in 2 different sizes, and you can choose different sizes according to different areas of information to cover large amounts of private information in a fast and clean way, avoiding identity theft and rejecting privacy disclosure harassment
- Easy to Use: just remove the lid on the ID stamp blocker roller and open it, and then gently slide it on the place where the information needs to be covered. It is suitable for most ordinary paper with black words, and can protect your personal privacy in time
- Save Time and Energy: compared with the shredder, the personal confidential stamp has a small size, easy to carry, can be applied anytime and anywhere. Compared to the marker, it covers a larger area and can be quickly covered with a single swipe. There is no need to worry about whether you can not protect your privacy in time
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
