Aflac Incorporated, a major supplemental insurance provider, recently confirmed a data breach affecting individuals whose information it holds. The company reported the security incident to the Montana Attorney General on December 19, 2025, detailing a breach that occurred on June 12, 2025. While the precise nature of the compromise has not been fully disclosed, it impacts individuals whose confidential data was entrusted to Aflac.
The exposed data categories are extensive and highly sensitive. They include Full Name, Social Security Number, Date of Birth, Policy Number, Financial Account Number, Routing Number, Claims and Medical Information, and Address and Contact Information. This combination of personal identifiers and financial details can be particularly valuable to cybercriminals.
For those affected, the exposure of such detailed personal information carries severe risks. Bad actors could use Social Security Numbers and Dates of Birth to commit various forms of identity theft, including opening new lines of credit or filing fraudulent tax returns. The inclusion of Financial Account Numbers and Routing Numbers directly exposes victims to potential financial fraud, while compromised Claims and Medical Information could lead to medical identity theft.
As a financial and insurance institution, Aflac Incorporated is legally obligated to protect the sensitive personal and financial data it collects from policyholders. Regulations like the Gramm-Leach-Bliley Act (GLBA) and various state laws mandate robust security measures to prevent unauthorized access. The occurrence of this data breach suggests that these protective measures may have been insufficient, raising questions about the company's data security practices.
If you have received a data breach notification letter from Aflac Incorporated, it confirms that your personal information was compromised in this incident. You may have grounds to join a class action lawsuit aimed at holding Aflac accountable for its failure to protect your data. Consulting with an attorney specializing in data breaches can help you understand your legal options and potential claims. Our firm offers free, no-obligation case reviews for breach victims.