News: 0180485267

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

22 Million Affected By Aflac Data Breach (securityweek.com)

(Tuesday December 30, 2025 @11:41AM (BeauHD) from the another-day-another-breach dept.)


An anonymous reader quotes a report from SecurityWeek:

> Insurance giant Aflac is notifying roughly 22.65 million people that their personal information was [1]stolen from its systems in June 2025 . The company disclosed the intrusion on June 20, saying it had identified suspicious activity on its network in the US on June 12 and blaming it on a sophisticated cybercrime group. The company said it immediately contained the attack and engaged with third-party cybersecurity experts to help with incident response. Aflac's operations were not affected, as file-encrypting ransomware was not deployed.

>

> [...] The compromised information, the insurance giant says, includes names, addresses, Social Security numbers, dates of birth, driver's license numbers, government ID numbers, medical and health insurance information, and other data. "The review of the potentially impacted files determined personal information associated with customers, beneficiaries, employees, agents, and other individuals related to Aflac was involved," Aflac said in [2]a notification (PDF) on its website. The company is providing the affected individuals with 24 months of free credit monitoring, identity theft protection, and medical fraud protection services.



[1] https://www.securityweek.com/22-million-affected-by-aflac-data-breach/

[2] https://www.aflac.com/docs/aflac-cyber-incident-6-24-2025.pdf



Re: Obligatory... (Score:2)

by Slashythenkilly ( 7027842 )

You stupid, naive SOB. (-1) Anonymous Coward 12 hours ago You think that's all it will take Johnny Law to throw up his hands and slink away in defeat? Guess again. You will be told "you definitely have the right to remain silent...as long as you can stand the pain." Now this pain might be literal or legal, but it WILL be applied. You may imagine yourself as the heroic main character in your mind's movie just because your coddling helicopter mommy told you that at some point in your life, but one day it wi

press 9 (Score:2)

by ole_timer ( 4293573 )

to hear a duck

Re:press 9 to hear a duck (Score:1)

by Tablizer ( 95088 )

Moooo

"Damned hackers!"

Does aflac cover data breaches? (Score:3)

by FictionPimp ( 712802 )

I know if I break my arm aflac will come give me a check, but will it give me a check when it breaks my privacy?

Re: (Score:2)

by phantomfive ( 622387 )

> I know if I break my arm aflac will come give me a check,

They might not, have you ever tried?

Re: (Score:2)

by FictionPimp ( 712802 )

I'm just saying that's their whole sales pitch. I personally decline this kind of insurance as I believe it is not a wise investment when compared to the risk you are hedging against.

Re: Does aflac cover data breaches? (Score:2)

by blue trane ( 110704 )

How much are thry getting from insurance against data breaches?

I'm sure there must be: (Score:1)

by DjangoShagnasty ( 453677 )

A. Some kind of legislation.

B. Some kind of tax.

C. Some government backed costly certification.

D. A new, costly, proprietary AI tool

E. All of the above.

... that we can hurriedly slap in place to fix the internets!

Re: (Score:1)

by Tablizer ( 95088 )

F. Kick them in the duck

It was a sophisticated cyberattack (Score:2)

by zawarski ( 1381571 )

Is an excuse I will never, ever, ever be able to use. Must be nice.

Why only 24 months of monitoring (Score:2)

by MeNeXT ( 200840 )

when the information that was stolen cannot be changed. This should be a lifetime of free monitoring even after you move to a new insurance company.

Re: (Score:2)

by nealric ( 3647765 )

These "credit monitoring" services they offer with every data breach are completely worthless. So after you lost my personal information, your solution is to tell me to have a different third party monitor my information? It's a fig-leaf to avoid actually paying for damages.

I also get data breach notices on a close to annual basis these days. I'm sure the personal info of almost every adult in the Western world is out there on the dark web by now.

Re: (Score:2)

by FictionPimp ( 712802 )

I have a lifetime of monitoring. Every year someone gets breached and gives me monitoring.

Too late (Score:2)

by Slashythenkilly ( 7027842 )

6 months is way too long to let everyones' information be compromised without notice. They should be sued into oblivion just for that.

Re: (Score:2)

by eedwardsjr ( 1327857 )

It happened on the 12. Reported on the 20th according to the summary. That's about a week. What do you meant 6 months?

Re: (Score:1)

by mrbester ( 200927 )

No, they took 6 months to publicise the event.

However, they still took over a week to disclose the breach to appropriate bodies, which I'm sure is 5 days more than it should have been. At least, that's what the law is in UK.

No one's said it yet? (Score:2)

by DaveyJJ ( 1198633 )

Well then, I believe the correct response is ... F*ck a duck. LOL. I'll see myself out.

This ae nighte, this ae nighte,
Everye nighte and alle,
Fire and sleet and candlelyte,
And Christe receive thy saule.
-- The Lykewake Dirge