Yes, the Aflac breach was real. Aflac said an unauthorized actor accessed systems in its U.S. business on June 12, 2025, using social-engineering tactics. In a December 19 update, the company said personal information associated with approximately 22.65 million individuals was in potentially impacted files.
The affected population was broader than current policyholders. It could include customers, beneficiaries, employees, agents and other people connected to Aflac’s U.S. business. The information varied by person and may have included contact, claims, health and Social Security information.
As an Amazon Associate I earn from qualifying purchases.
What happened in the Aflac breach?
Aflac detected suspicious activity and said an unauthorized party obtained information from an Aflac system on June 12, 2025. The company publicly disclosed the incident on June 20 in a newsroom announcement and an SEC filing.
Aflac described the intrusion as involving social engineering and said it was part of a broader cybercrime campaign targeting insurance companies. Its cited primary disclosures did not publicly name a threat actor, so claims attributing the incident to a specific group remain unverified.
#1 Best Overall
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Aflac said it contained the intrusion within hours, engaged outside cybersecurity experts, notified federal law enforcement, secured potentially affected accounts, reset passwords and increased monitoring. It also said its systems were not affected by ransomware and that business operations continued. That does not mean information was not accessed; it means Aflac did not describe the event as a ransomware encryption or outage incident.
How many people were affected?
On December 19, 2025, Aflac said its review identified personal information associated with approximately 22.65 million individuals in potentially impacted files. The commonly used “22 million” figure is a rounded version of that estimate.
Aflac did not say every individual had the same information exposed. The affected files may have related to:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- WHAT DOES IT COVER: Roll once over names, addresses, account numbers, barcodes, and prescription details on mail, statements, shipping labels, and boxes before recycling. The patented 0.5" masking pattern hides 3 lines of text in one pass.
- HOW MANY USES DO YOU GET: Each pre-inked Guard Your ID Advanced Roller delivers about 1,000 impressions (roughly 100 feet of coverage), so the 3-pack gives you around 3,000. A twist-on cap keeps the ink fresh for a 2-year shelf life.
- DOES IT WORK ON GLOSSY LABELS: Yes, on most glossy and coated surfaces, plus paper, envelopes, junk mail, and prescription labels. Give the ink 10 to 15 seconds to dry on slick surfaces; it is instant on paper. Results vary by coating.
- IS IT REFILLABLE: No, and that is the point. The Advanced Roller is pre-inked and sealed, so there are no refill cartridges to buy, no ink bottles to handle, and nothing to dry out on the shelf. When one runs out, reach for the next roller.
- SHREDDER OR ROLLER: No jams, no paper dust, no noise, and the page stays intact and recyclable. Covers boxes and shipping labels a shredder cannot. Faster than a redacting marker, fits in a drawer. Turquoise, Green, White: mail, office, parent.
- Customers and policyholders
- Beneficiaries
- Employees
- Agents
- Other people associated with Aflac’s U.S. business
Being a current Aflac customer does not automatically mean you were included, and not receiving a letter is not conclusive proof that your information was not involved. Aflac may have had an outdated address, or your relationship with the company may have been recorded in a non-customer capacity.
Use Aflac’s December update and its detailed incident notice for the company’s current explanation.
What information may have been exposed?
Aflac said potentially impacted files could contain:
Rank #3
- ALL-IN-ONE SCAM DETECTION – Texts, emails, videos, and QR codes all get checked automatically. Sorting real from fake stops being your job.
- KEEP SCAMMERS OUT OF YOUR WALLET – Every click is no longer a gamble. Our scam detection spots suspicious texts, email scams, SMS phishing, and fake alerts before you click.
- QR CODE SCANNING – Point the app at any code and see where it actually leads before you scan it.
- DEEPFAKE DETECTION – When a video sounds like someone you know but isn't, you hear it from us first.
- ON-DEMAND CHECKS – Got a message you're unsure about? Run it through the app and know in seconds, wherever it came from.
- Names and contact information
- Claims information
- Health information
- Social Security numbers
- Other personal information
The exact categories depended on the individual. The available disclosure does not support saying that all 22.65 million people had their Social Security numbers, medical information or every other listed data element exposed.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhy health and claims information matters
This was not only a conventional credit-card or new-account-fraud risk. If health or claims information was involved, criminals could potentially use it for medical identity theft, such as submitting false insurance claims, obtaining services or prescriptions, creating incorrect provider records, or improperly using benefits.
Credit monitoring may not reveal these problems. Review explanation-of-benefits statements, insurance claims, provider records, medical bills, prescription notices and benefit changes for activity you do not recognize.
Rank #4
- Protect Your Privacy Effectively: you can use this identity protection roller stamp to flip personal information in under 2 seconds and save time and effort, effectively hiding and protecting your personal information, such as phone numbers, social security numbers, bank statements, shipping addresses, tax documents,data, billing addresses and many more
- Ideal Replacement for Shredder: if you are still using a shredder to shred cards or papers that are printed with your personal information, this security stamper roller will be an alternative tool to block out your privacy effectively and easily
- Refillable and Long Term Use: this confidential stamp can cover a total length of up to 100 meter/ 109 yards, approximately 3,200 prints are covered, pattern width is about 0.78 inches; When ink runs out, you can refill the security stamp with ink
- Easy to Use: just continuous roll the address blocker roller stamp to conceal information, and roll on a second layer for maximum protection, works on paper, envelopes, folders, address labels, etc., please note that may not work on smooth surfaces
- How to Refill the Ink: there are 4 pieces of ID stamp refills, each is about 1.5 ml, you just need to unscrew the cap of the ink bottle (not disposable, you can close the cap for next time of use), then insert it into the hole on the side of the stamp, then turn it upside down, about 5 minutes later, the most of the ink will be replenished to the security roller stamp
What protection did Aflac offer?
Aflac said eligible notified individuals could receive 24 months of CyEx Medical Shield, including credit monitoring, identity-theft protection, medical-fraud protection and customer support.
The incident notice listed April 18, 2026 as the enrollment deadline. As of September 5, 2026, that deadline has passed. Do not assume enrollment is still available or pay anyone to activate the original free benefit.
If you received a notice but missed the deadline:
- Keep the original letter and any enrollment code.
- Check the website and phone number printed in the letter.
- Verify contact details independently through Aflac’s official website.
- Ask Aflac whether late enrollment, replacement assistance or another remedy is available.
The initial Aflac announcement published an incident-support number of 1-855-361-0305, but contact details can change. Confirm that number through an official Aflac source or your notification letter before sharing personal information.
Best Value
- The id defender roller is the ultimate tool for guarding your personal data at home or in the office. Prevent identity theft by quickly masking sensitive information on mail, documents, or labels, giving you confidence that your details remain private and secure with Vantamo id theft protection.
- Effortlessly block out sensitive text with the label cover up identity protection, designed for quick, one-handed use. No more scraping off all shipping labels or doing a lot of swipes with a marker! Even first-time users will find the process intuitive and straightforward, making it a practical label eraser roller for anyone!
- Vantamo wide rolling privacy marker is fully refillable and arrives with 6 ink refill for self inking stamps ensuring lasting performance. Don't run out when you need it the most. The ink is specially designed for hiding information.
- Our address blackout stamp not only protects your privacy but also helps the environment. After using the roller on your documents, the paper is ready to be safely recycled, making this address eraser a smart alternative to shredding or tossing documents.
- Here at Vantamo, we are creating products that people love! We are committed to providing excellent customer service on every black out stamp. If you ever have questions or concerns, our team is here to help, ensuring your id defender delivers reliable protection and peace of mind every time.
What should you do now?
If your Social Security number may have been involved
- Place a free security freeze with Equifax, Experian and TransUnion. A freeze is generally the strongest free step against new-account fraud, though you must temporarily lift it when a legitimate creditor needs access.
- Obtain and review your reports through AnnualCreditReport.com.
- Consider a fraud alert if you prefer a less restrictive option. The FTC explains the difference between freezes and alerts.
- If you find fraud, report it through the FTC’s IdentityTheft.gov recovery system and contact the affected creditor.
If health or claims information may have been involved
- Check explanation-of-benefits statements and insurer claim histories.
- Contact your insurer’s fraud or member-services department about unfamiliar claims or benefit use.
- Ask medical providers to correct inaccurate records.
- Investigate unfamiliar medical bills, prescriptions, services or changes to your coverage.
If a password may be connected to the incident
- Change it anywhere you reused it.
- Use a unique password for each account.
- Turn on multifactor authentication.
- Be cautious of calls claiming to be from Aflac, a bank, an insurer or a monitoring provider.
Beware of follow-up Aflac scams
A real breach gives criminals a convincing reason to impersonate Aflac. Treat unexpected texts, emails and calls as suspicious, even if the sender knows your name, policy details or partial personal information.
Warning signs include requests to pay for Aflac’s supposedly free monitoring, demands for your full Social Security number by text, urgent threats that your policy will be canceled, lookalike domains, unexpected attachments and requests to install software.
Open Aflac’s website yourself rather than clicking an unsolicited link. Never pay a third party to activate a breach benefit, and do not provide sensitive information until you have independently verified whom you are contacting.
Free tools Windows power users keep installed
One-click scans. No signup required.
What remains uncertain?
Aflac said in its December 2025 update that it was not aware of fraudulent use of the information at that time. That is a time-limited statement about what the company had identified, not proof that misuse is impossible or that the risk has expired.
The public primary disclosures also do not establish that every affected person had identical data exposed, that specific medical records were publicly posted, or that a particular named threat group was responsible. The most reliable indication of whether you were included is an individual Aflac notification or confirmation through an official Aflac channel.
Quick Recap
Quick checklist
- Find and preserve any Aflac breach letter.
- Confirm whether your information was included through official Aflac contact channels.
- Do not assume the CyEx enrollment offer remains open; the published deadline was April 18, 2026.
- Freeze your credit if Social Security information may have been involved.
- Review credit reports, insurance claims and medical records.
- Change reused passwords and enable multifactor authentication.
- Ignore payment demands or unsolicited links claiming to activate Aflac protection.
- Report suspected identity theft through IdentityTheft.gov.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
