Aflac Japan 2026 Security Incident
The 2026 Aflac Japan security incident involved officially reported unauthorized access to some systems from June 15 through June 25, 2026, with the company identifying the incident on June 25.
Exposed Data Types
8- Names
- Dates of birth
- Gender
- Physical addresses
- Phone numbers
- Insurance policy numbers
- Insurance policy information
- Subset-only bank account information
About This Breach
Approximately 4.38 million customers and agents were affected; this is not an email-search or searchable-row count.
Person-varying fields are names, birth dates, gender, physical addresses, phones, insurance policy numbers or information, and bank-account information for a subset of approximately 230,000 people. Credit-card and national-ID information were not affected, and Aflac's US systems were outside this incident scope.
The approximate 4.38 million figure is not unique leaked accounts, emails, or people carrying every field, and 230,000 is not the full affected population. The record does not establish identity, Aflac Japan customer or agent status, a particular policy or health condition, bank-account ownership, field co-occurrence, credit-card or national-ID impact, fraud, or misuse.
Insurance association, policy, bank, birth-date, address, and phone data require the strictest private handling. Only direct notice recipients should follow the policy, banking, and identity protections in their notice and verify unexpected payment or policy requests through an independent official Aflac Japan channel.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information