Aflac Life Japan Data Breach Exposes Personal Data of 4.38 Million Policyholders
Aflac Life Insurance Japan confirmed unauthorised access to its policyholder portal systems between 15 and 25 June 2026, exposing approximately 4.38 million personal records including names, addresses, phone numbers, policy and coverage details, and for a subset, bank account information used for premium auto-debit transfers. Affected systems have been suspended, the incident is confined to Japan-based operations, no data misuse has been confirmed, and concerns have been raised over the third-party contractor handling incident response.
AI-generated from linked source reports. See our correction policy.
Impact verdict
Medium impact. Named breach of approximately 4.38 million personal records at a major Japanese life insurer, with disclosed data categories including bank account information used for premium auto-debit and policy/coverage details. Primary insurance pathways are notification and credit-monitoring costs, potential third-party cyber liability and class-action exposure, and Japanese APPI regulatory exposure. The incident is contained to Aflac's Japan subsidiary with no direct evidence of London Market specialty insured loss, remaining an indirect cyber accumulation signal for data-heavy life and health portfolios and an indicator of continued insurer-targeted cyber campaigns.
View assessment methodologyPremium discovery tier
Unlock analyst briefs, intelligence depth, and the revision timeline
Public pages show event facts and a short lead-in. Premium accounts unlock analyst briefs, deeper intelligence, loss context, and the full revision history for this event.
Start two-week trialGeographic Zone Matches
1 active match
- Pacific Ring of FireRule-basedConfidence 100%
Geographic zone matches are RiskEvents spatial/analytical indicators, not coverage determinations or Lloyd's official classifications.
Affected countries
Lloyd's classifications
Tracking this kind of risk? Get an email when Cyber events escalate.
Get alerts