Aflac Discloses Breach Exposing 22.6 Million Records

Aflac Inc. confirmed in late December 2025 that hackers compromised personal and health data of about 22.6 million people, stemming from a June intrusion. The company said names, addresses, Social Security numbers, identity documents and medical records were exposed and linked investigators to the Scattered Spider group; Aflac offered two-year credit monitoring as regulators probe the incident. The breach underscores persistent cyber risks to insurers.
Key Points
- 1Compromised 22.6 million individuals' personal and health records via June intrusion disclosed December 2025
- 2Linked to Scattered Spider group using social engineering, highlighting sophisticated, persistent threats to insurers
- 3Practitioners must strengthen MFA, zero-trust, employee training, and rapid detection to reduce similar fallout
Scoring Rationale
High-impact breach with major data exposure; limited AI/ML relevance but critical for cybersecurity and industry response.
Sources
Public references used for this report.
Practice with real Health & Insurance data
90 SQL & Python problems · 15 industry datasets
250 free problems · No credit card
See all Health & Insurance problems
