<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Aflac data breaches · Privacy Unpacked</title>
  <link href="https://privacyunpacked.com/breaches/company/aflac/feed.xml" rel="self"/>
  <link href="https://privacyunpacked.com/breaches/company/aflac/"/>
  <id>https://privacyunpacked.com/breaches/company/aflac/feed.xml</id>
  <updated>2026-06-30T00:00:00Z</updated>
  <author><name>Privacy Unpacked</name></author>
  <entry>
    <title>Aflac data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/aflac/"/>
    <id>https://privacyunpacked.com/breaches/company/aflac/#aflac-2026-06-30</id>
    <updated>2026-06-30T00:00:00Z</updated>
    <summary>Aflac (GA, United States) notified the US Securities and Exchange Commission (8-K Item 8.01) of a data breach on 30 June 2026.</summary>
  </entry>
  <entry>
    <title>Aflac data breach (United States): 2,055,982 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/aflac/"/>
    <id>https://privacyunpacked.com/breaches/company/aflac/#aflac-2025-12-22</id>
    <updated>2025-12-19T00:00:00Z</updated>
    <summary>Aflac (GA, United States) notified the Texas Attorney General, the Iowa Attorney General and the California Attorney General of a data breach on 19 December 2025. It told the states about 2,055,982 Texas residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers, Health insurance details, Health and medical information and Dates of birth and more. The breach began on 12 June 2025, 190 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Aflac data breach (United States): 432,025 Washington residents</title>
    <link href="https://privacyunpacked.com/breaches/company/aflac/"/>
    <id>https://privacyunpacked.com/breaches/company/aflac/#aflac-2025-07-11</id>
    <updated>2025-06-20T00:00:00Z</updated>
    <summary>Aflac (GA, United States) notified the Oregon Department of Justice, the US Securities and Exchange Commission (8-K Item 8.01) and the Washington Attorney General of a data breach on 20 June 2025. It told the states about 432,025 Washington residents; the total can be higher. The breach began on 12 June 2025, 8 days before it was reported.</summary>
  </entry>
</feed>
