INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Aflac Discloses Data Breach Impacting Millions of Customer Records

| 2026-07-01 09:00 CRITICAL HIGH DATA BREACH
JSON
Executive Summary
AI-generated
A major data breach was discovered by US insurer Aflac's Japan subsidiary on June 25, which was disclosed in a filing with the SEC on June 30. The unauthorized third-party accessed certain systems between June 15 and June 25, compromising personal and financial information of nearly 4.4 million customers, including around 230,000 premium payment accounts. The attack works by exploiting vulnerabilities in Aflac Japan's systems to gain access to sensitive data. As the investigation remains ongoing, no misuse of the compromised information has been confirmed, but authorities have been notified.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Scattered SpiderScattered Spider
Target & Sectors
NORTH_AMERICA NORTH_AMERICA financefinance
Incident Timeline
‎2026/07/01
Threat actors linked to the notorious Scattered Spider group accessed and stole personal information of nearly 4.4 million Aflac Japan customers, including policy details, bank account information, and premium payment accounts of around 230,000 customers.
threat_actor Scattered Spider
A year ago, the firm suffered another data breach which was claimed to be part of a wider campaign  targeting US insurers thought to be the work of the Scattered Spider group.
Another Scattered Spider Attack?
victims 4.4 customers
According to local reports , personal and financial information on nearly 4.4 million customers has been compromised.
victims 230,000 customers
This includes information about the premium payment accounts of around 230,000 customers.
Tactical Metrics
Metrics
victims
4,400,000
Customers
According to local reports , personal and financial information on nearly 4.4 million customers has been compromised.
Metrics
victims
230,000
Customers
This includes information about the premium payment accounts of around 230,000 customers.
Intelligence Sources
Infosecurity-Magazine 2026-07-01