Technology

Aflac reveals personal data of 22.6 million people stolen in cyberattack - here's what we know

2025-12-24 14:00
314 views
Aflac reveals personal data of 22.6 million people stolen in cyberattack - here's what we know

Six months after the breach, Aflac determines how many people are affected and starts reaching out.

  1. Pro
  2. Security
Aflac reveals personal data of 22.6 million people stolen in cyberattack - here's what we know News By Sead Fadilpašić published 24 December 2025

Six months after breach, Aflac determines how many people were affected

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

World Password Day 2025 (Image credit: Shutterstock) Share Share by:
  • Copy link
  • Facebook
  • X
  • Whatsapp
  • Reddit
  • Pinterest
  • Flipboard
  • Threads
Share this article 0 Join the conversation Follow us Add us as a preferred source on Google
  • Aflac confirms personal data of 22.65 million individuals (SSNs, health info, claims) stolen in June 2025 breach
  • Victims include customers, employees, agents; company now issuing notifications and offering support
  • Scattered Spider suspected, also linked to attacks on Erie, Philadelphia Insurance, and Allianz Life

More than 22 million people were affected by the cyberattack which struck American insurance giant Aflac in summer 2025, the company has revealed.

“Based on our review of potentially impacted files, we have determined personal information associated with approximately 22.65 million individuals was involved,” the statement reads.

The company is now notifying everyone whose information, which includes customers’ claims, Social Security numbers, and health information, was stolen. The victims include company beneficiaries, employees, and agents.

You may like
  • Security alert showing on a computer monitor Conduent admits its data breach may have affected around 10 million people
  • Caution sign data unlocking hackers. Malicious software, virus and cybercrime, System warning hacked alert, cyberattack on online network, data breach, risk of website Massive data breach sees credit card details of over 5.6 million victims leaked - here's what we know
  • Code Skull Qantas admits 5 million customers have data leaked following ransomware attack - here's what you need to know

Scattered Spider

In late June 2025, the company filed an 8-K report with the US Securities and Exchange Commission (SEC), saying that it identified unauthorized access to its network, which it contained “within hours”.

At the time, the company said it didn’t believe the attack was ransomware, but stressed that without a thorough investigation, it cannot be certain about the nature of the incident, or who the affected people are.

US law firm Maynard Nexsen also said in June 2025, “several insurance companies” were targeted by Scattered Spider, including Aflac, Erie Insurance, and Philadelphia Insurance.

“The threat actor, Scattered Spider, is now focusing on the insurance industry,” it was said in the announcement.

Are you a pro? Subscribe to our newsletterContact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

This included Allianz Life Insurance Company of North America (Allianz Life), which in July notified 1.4 million of its customers, financial professionals, and employees it had suffered the same fate, and lost personal information via a third-party CRM platform, to Scattered Spider.

Scattered Spider hackers are known to be financially motivated, with previous cyberattacks cyberattacks and intrusions at tech giants, casinos, and hotels.

Via TechCrunch

Best antivirus software headerThe best antivirus for all budgetsOur top picks, based on real-world testing and comparisons

➡️ Read our full guide to the best antivirus1. Best overall:Bitdefender Total Security2. Best for families:Norton 360 with LifeLock3. Best for mobile:McAfee Mobile Security

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.

Sead FadilpašićSocial Links Navigation

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Show More Comments

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Logout Read more Security alert showing on a computer monitor Conduent admits its data breach may have affected around 10 million people    Caution sign data unlocking hackers. Malicious software, virus and cybercrime, System warning hacked alert, cyberattack on online network, data breach, risk of website Massive data breach sees credit card details of over 5.6 million victims leaked - here's what we know    Code Skull Qantas admits 5 million customers have data leaked following ransomware attack - here's what you need to know    A digital themed isometric showing a neon padlock in the foreground, and a technological diagram of a processor logic board in the background. Hyundai IT services breach could put 2.7 million Hyundai, Kia owners in the US at risk    Secure online access with password and login page to manage personal profile account. Secured connection and data security on internet. Cybersecurity and sign in form. User working on laptop computer. Over 17 million victims reported in huge Prosper data breach - here’s what we know so far    hacker hands at work with interface around Healthcare firm apparently hit by major cyberattack exposing over a million medical records - how to find out if you're affected    Latest in Security Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration. AI-created ransomware and NFC attacks lead the surge in new cyberattacks - here's how you can stay safe this holidays    DDoS Attack Suspected DDoS attack takes France’s post office offline    Google Chrome app is seen on an iPhone next to Edge and other web browser apps. Microsoft is using new prompts in Edge to try and stop users from downloading Chrome. These malicious Google Chrome extensions have stolen data from over 170 sites - find out if you're affected    Trojan Dangerous WebRAT malware now being spread by GitHub repositories    Nissan Titan Nissan says Red Hat breach affected thousands of customers    Christmas scams Phishing emails and fake adverts flood inboxes this Christmas - and they’re getting harder to detect than ever    Latest in News A foldable iPhone concept against a multi-colored background. This 3D-printed iPhone Fold mockup might be as close as you can come to holding the real thing    DJI Osmo Pocket 3 Another image of the DJI Osmo Pocket 4 leaks — and it could come with a mysterious new accessory    The two new variants of the Nitro Deck 2. This Switch 2 Joy-Con replacement was already my most anticipated accessory — and now it’s getting two new versions plus cool pre-order bonuses    Maingear BYO RAM scheme showing RAM sticks on a desk One PC building firm has an answer to harsh DRR5 price hikes: BYO RAM    Sony WF-1000XM5 Sony WF-1000XM6 earbuds leak again, this time with a release date hint    Promotional image of the Hisense XR10 projector Hisense unveils a 300-inch 4K laser projector, plus a new UST projector    LATEST ARTICLES