Aflac reports massive hacking incident affecting 13.9 million individuals
Aflac Incorporated, a health plan, filed a report with HHS OCR on August 8, 2025, disclosing a hacking/IT incident that compromised the data of 13,924,906 individuals. The breach occurred on a network server. As this filing date represents when the report was submitted to regulators, not when the incident occurred or was discovered, the timeline of exposure remains unclear.
Sources differ:
- The HHS OCR breach portal record lists 13,924,906 individuals; BankInfoSecurity (January 2026) reports that Aflac's own notice puts the total at about 22.65 million people.
Primary source: HHS OCR Breach Portal — Aflac Incorporated (“Aflac”) (GA) · reported 08/08/2025 · 13,924,906 individuals · Checked against the record 2026-10-19