Home / Breach tracker / United States / Aflac Aflac (GA, United States) notified the US Securities and Exchange Commission (8-K Item 8.01) of a data breach on 30 June 2026.
Breach reported 30 June 2026
Status Confirmed breach
People affected Not reported yet
Reported 30 June 2026 What was exposed
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
Sources
Official notices are read by code from the regulator’s own register. More notices to SEC filings . · Corrections and changes
Breach reported 19 December 2025
Status Confirmed breach
People affected 2,055,982 Texas residents (one state’s count; the total can be higher)
Reported 19 December 2025
Breach began 12 June 2025
Time to tell 190 days (the median in California’s notices over the last year: 154 days) What was exposed
Sources
Official notices are read by code from the regulator’s own register. More notices to Texas , Iowa , California . · Corrections and changes
Breach reported 20 June 2025
Status Confirmed breach
People affected 432,025 Washington residents (one state’s count; the total can be higher)
Reported 20 June 2025
Across the state notices at least 432,026 people (Oregon and Washington: each state counts only its own residents)
Breach began 12 June 2025
Time to tell 8 days (the median in California’s notices over the last year: 154 days) What was exposed
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
What changed since it was first reported 29 October 2026 Confirmed breach, 432,025 Washington residents (Washington Attorney General) Sources
Official notices are read by code from the regulator’s own register. More notices to Oregon , SEC filings , Washington . · Corrections and changes
If Aflac had your data
Look for Aflac Inc’s own notice or letter: it should say what of yours was involved. Keep it. The register’s list does not say what was exposed; the notice it links to (under Sources) usually does. If Aflac Inc has a password of yours, change it now to be safe. Expect scams that use your details: calls, texts or emails pretending to be Aflac Inc, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Earlier breaches at Aflac
From the official registers’ and Have I Been Pwned’s full histories. A name match: check the notice to be sure it is the same company.
28 September 2018 California Attorney General · began 8 September 2017
Privacy Unpacked