Where does the Aflac Incorporated case file come from?

Every entry is taken from the breach report Aflac Incorporated lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Aflac Incorporated Data Breach

This file collects the dated facts on record for the Aflac Incorporated incident. The state report is dated July 11, 2025. The incident itself is dated June 12, 2025.

Timeline

29 days separate the incident date from the date it was reported.

June 12, 2025Incident dateWhen the filing says the breach took place.
July 11, 2025Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: July 11, 2025
Incident date: June 12, 2025
Receiving office: Oregon Attorney General

Case notes

Aflac Incorporated, based on a filing made with Oregon authorities on July 11, 2025, experienced a data security incident. The company reported that this event took place on June 12, 2025. Details regarding the nature of the breach type were not specified in the public record at the time of filing.

The specific categories of personal information involved in this incident have not been detailed in the publicly available reports. Aflac Incorporated has stated that the investigation into this matter is ongoing. This means the company is still working to understand precisely what information may have been accessed or acquired as a result of the breach.

Because the exact types of data involved are currently unspecified, individuals who receive notification from Aflac Incorporated about this incident should carefully review that communication for details relevant to their personal situation. Such letters are the primary source for understanding what specific information pertaining to you was affected.

As a general precaution, it is recommended to remain vigilant for any unusual account activity or unsolicited communications. Regularly review statements from financial institutions and any other accounts for discrepancies. If you notice anything suspicious, contact the relevant institution directly.

Furthermore, consider implementing strong, unique passwords for all your online accounts and enabling multi-factor authentication wherever possible. These steps can help protect your personal information, especially if any credentials were among the data involved in the security incident. Maintain awareness of phishing attempts, which often increase after data security events.

Questions about this case file

Where does the Aflac Incorporated case file come from?: Every entry is taken from the breach report Aflac Incorporated lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Filing source: Oregon Attorney General

Named in the Aflac Incorporated breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files