At a Glance
- Aflac confirms data breach impacted 22.65 million people.
- Personal data stolen includes Social Security numbers, health info, and insurance claims.
- Aflac offers free credit monitoring, identity theft protection, and a 24-month Medical Shield.
- Why it matters: Millions of customers now need to enroll in protective services before the April 2026 deadline.
Aflac has confirmed that a data breach earlier this year exposed personal information for roughly 22.65 million people. The company, after a detailed review, is now notifying affected customers, beneficiaries, employees, agents, and other related individuals. It is offering free credit monitoring, identity theft protection, and a 24-month Medical Shield to help mitigate the risk.
Breach Details and Response
In June, Aflac detected suspicious activity on its network and halted the intrusion within hours. Investigations suggest social engineering tactics were used to gain access to sensitive data, including names, contact details, health records, and Social Security numbers.
Affected personal information includes:
- Names
- Contact information
- Health details
- Social Security numbers
Aflac completed a comprehensive review and confirmed that approximately 22.65 million individuals were impacted.
Protection Services and Enrollment
Aflac is notifying those impacted and offering a suite of free protective services. Customers, beneficiaries, employees, agents, and other related individuals can enroll by calling the company’s call center.
Services available:
- Free credit monitoring
- Identity theft protection
- 24-month Medical Shield
Call center hours:
- Monday-Friday 9 a.m.-9 p.m. ET
- Saturdays 9 a.m.-5:30 p.m. ET
- Closed on major U.S. holidays
Enrollees have until April 18, 2026 to register. The call center operates Monday-Friday 9 a.m.-9 p.m. ET and Saturdays 9 a.m.-5:30 p.m. ET, and is closed on major U.S. holidays.
Aflac reports no fraud has been detected related to the breach. If you identify suspicious activity, you should contact the entity that maintains the information on your behalf.
Aflac statement:
> “If you identify suspicious activity, you should contact the entity that maintains the information on your behalf.”
If you previously enrolled in CyEx Medical Shield after learning of the breach, you do not need to re-enroll.
| Personal Information | Affected Count | Protection Offered |
|---|---|---|
| Names, contact info, health details, SSN | 22.65 million | Free credit monitoring, identity theft protection, Medical Shield (24 months) |
Key Takeaways
- Aflac’s breach affected 22.65 million people.
- The company is offering free credit monitoring, identity theft protection, and a 24-month Medical Shield.
- Impacted individuals must enroll by April 18, 2026.
Aflac’s swift response and protective offerings give customers a clear path to safeguard their personal information after the breach.
