Aflac Cybersecurity Incident: Policyholder Data Potentially Exposed

4 min read time
Headshot of Antonio Arzola, a Tampa-based class action lawsuit lawyer at Morgan & Morgan Reviewed by Antonio Arzola, Attorney at Morgan & Morgan, on June 23, 2025.
data leak alert

Morgan & Morgan’s data privacy attorneys are investigating a cybersecurity incident recently disclosed by Aflac Incorporated that may have exposed sensitive customer information. Aflac has announced that unauthorized parties gained access to internal systems used by a third-party service provider, raising serious concerns about the safety of consumer data. If you received a notification letter, Act Now.

We are currently investigating, among other things:

  • how Aflac and its vendors acquired the sensitive information;
  • whether Aflac should have had access to this information;
  • whether the information was stored in a secure digital environment;
  • whether Aflac required its vendors to encrypt data and follow best security practices;
  • whether Aflac implemented adequate oversight and safeguards for its service providers;
  • and whether Aflac offered affected individuals appropriate protection and compensation following the incident.

According to Aflac’s public statement, the breach occurred through one of its external vendors and may have impacted personal data tied to U.S. policyholders. The scope of the incident, including the total number of affected individuals and the exact type of data exposed, has not yet been disclosed. However, Aflac has notified regulators and is cooperating with authorities to assess the damage and prevent future breaches.

The type of information potentially compromised may include:

  • Names
  • Policy details
  • Contact information
  • Partial Social Security numbers
  • Insurance account or claim-related information

If you received a breach notification related to Aflac, contact us today. Our data privacy team is here to review your situation and help determine if your rights were violated.

Insurers have a legal and ethical obligation to safeguard sensitive data shared by their policyholders. If you suspect your personal information may have been exposed in the Aflac cybersecurity incident, don’t wait. Morgan & Morgan is standing by to help protect your rights.

Disclaimer
This website is meant for general information and not legal advice.

Injured? Getting the compensation you deserve starts here.

An illustration of a broken car.