Aflac Japan Reports Data Theft Potentially Affecting 4.38 Million
Summary
Aflac Japan says attackers accessed systems from June 15 to June 25 and exfiltrated personal information from its policyholder portal. About 4.38 million customers and agents are likely affected; the investigation is ongoing.
Key points
- Aflac Japan said attackers accessed some company systems repeatedly between June 15 and June 25, when the breach was discovered.
- The company says attackers exfiltrated data from its policyholder portal; about 4.38 million customers and agents are likely affected.
- Potentially exposed information includes names, contact details, dates of birth, gender, security information, and insurance account information.
- Aflac Japan says account information for insurance premium transfers belonging to roughly 230,000 people was also exfiltrated; no credit card information was accessed.
- At least five services were disrupted, and the company could not estimate when they would be restored.
- Aflac Japan says it suspended certain systems, notified authorities, and is investigating with third-party cybersecurity experts.
Article Details
- Victim Organization
- Aflac Life Insurance Japan (Aflac Japan)
- Incident Type
- Cyber intrusion and data breach involving unauthorized access to company systems and exfiltration of policyholder data
- Data Types Exposed
- Names
- Addresses
- Phone numbers
- Dates of birth
- Gender
- Security information
- Insurance account information
- Insurance premium transfer account information
- Affected Records
- Approximately 4.38 million customers and agents were likely affected. Insurance premium transfer account information for roughly 230,000 people was also exfiltrated.
- Operational Impact
- At least five services were disrupted. Aflac Japan suspended certain systems to contain the incident; the restoration timeline was unknown.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed