{"id":"aflac-japan-customer-breach-jun-2026","category":"breach","status":"closed","title":"Aflac Japan breach exposes 4.4 million customers’ insurance records and 220,000 customers’ bank details","tldr":"Aflac Japan exposed personal and insurance information for about 4.4 million customers, including bank details for 220,000. Notification letters have been sent. Check bank transactions and verify unexpected calls or messages directly with Aflac.","summary":"Attackers accessed Aflac Japan’s customer portal and an agency consultation system between 10 and 25 June 2026. Approximately 4.4 million policyholders were affected; exposed records included personal details, policy numbers, cover information and information about insured people, beneficiaries and secondary contacts. Premium-payment bank-account details were exposed for about 220,000 customers, alongside information concerning about 40,000 agencies. Aflac says My Number identifiers, credit-card information, email addresses and portal login credentials were not exposed. Current and former customers could be affected even without registering for the portal. Notification letters were posted by 30 July. Aflac identified inadequate access controls and monitoring, strengthened security and resumed most portal services on 28 September, with some procedures still handled through its call centre. Its 1 October update said no misuse of the exposed information had been confirmed. The breach concerned Japan; Aflac said its US business systems were not accessed.","action":"If you or a parent held Aflac Japan insurance, check the notification letter or call Aflac Japan on 0120-332-856 to confirm what was exposed. Monitor bank transactions and verify unexpected calls or messages through Aflac’s official website or phone number; never disclose PINs, passwords or one-time codes. Portal users should enable a passkey under registration details → passwordless authentication settings.","product":"Aflac Japan insurance records, Yorisou Net customer portal and agency online consultation system","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["aflac","japan","insurance","data-breach","bank-accounts"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Unauthorised access and information disclosure: customer FAQ","url":"https://www.aflac.co.jp/info/yorisou_faq.html","by":"Aflac Japan","date":"2026-10-01"},{"kind":"advisory","title":"Investigation results and measures to prevent recurrence","url":"https://www.aflac.co.jp/static/corp/profile/news/2026/2026073100.pdf","by":"Aflac Japan","date":"2026-07-31"},{"kind":"advisory","title":"Apology and notice concerning unauthorised access and information disclosure","url":"https://www.aflac.co.jp/static/corp/profile/news/2026/20260630.pdf","by":"Aflac Japan","date":"2026-06-30"},{"kind":"advisory","title":"Incident notice and Yorisou Net service availability","url":"https://www.aflac.co.jp/info/yorisou_maintenance.html","by":"Aflac Japan","date":"2026-10-01"},{"kind":"advisory","title":"Yorisou Net service restart and passkey setup guidance","url":"https://www.aflac.co.jp/canet/login-guide/","by":"Aflac Japan","date":""},{"kind":"news","title":"Insurance giant Aflac discloses data breach after subsidiary hack","url":"https://www.bleepingcomputer.com/news/security/insurance-giant-aflac-discloses-data-breach-after-subsidiary-hack/","by":"BleepingComputer","date":"2026-06-30"},{"kind":"news","title":"Aflac breach investigation identifies insufficient monitoring and controls for large data queries","url":"https://scan.netsecurity.ne.jp/article/2026/08/20/55972.html","by":"ScanNetSecurity","date":"2026-08-20"}],"started":"2026-06-10","closed":"2026-10-01","created":"2026-11-03T20:35:05.881Z","updated":"2026-11-03T20:35:05.881Z","cve_notes":[],"timeline":[{"at":"2026-10-01","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Aflac Japan said no misuse of the exposed information had been confirmed. Its updated FAQ described sharing affected account details with relevant banks to help prevent financial crime.","url":"https://www.aflac.co.jp/info/yorisou_faq.html","by":"Aflac Japan","patch":null},{"at":"2026-09-28","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Most Yorisou Net services resumed after Aflac completed preventative measures and safety checks. Some procedures remained unavailable online.","url":"https://www.aflac.co.jp/info/yorisou_faq.html","by":"Aflac Japan","patch":null},{"at":"2026-07-31","added":"2026-11-03T20:32:12.437Z","kind":"vendor-revised","text":"The investigation confirmed approximately 4.4 million affected customers, including about 220,000 with bank-account details exposed, and information concerning about 40,000 agencies. Aflac revised the first access date from 15 to 10 June and identified insufficient access controls and monitoring of large data queries.","url":"https://www.aflac.co.jp/static/corp/profile/news/2026/2026073100.pdf","by":"Aflac Japan","patch":null},{"at":"2026-07-30","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Aflac Japan completed posting notification letters to affected customers, having started on 10 July. The letters identified the information exposed for each customer.","url":"https://www.aflac.co.jp/info/yorisou_faq.html","by":"Aflac Japan","patch":null},{"at":"2026-06-30","added":"2026-11-03T20:32:12.437Z","kind":"disclosed","text":"Aflac Japan publicly disclosed the breach and reported it to police and regulators. Its initial figures were approximately 4.38 million customers, including about 230,000 whose premium-payment bank-account information was exposed.","url":"https://www.aflac.co.jp/static/corp/profile/news/2026/20260630.pdf","by":"Aflac Japan","patch":"na"},{"at":"2026-06-25","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Aflac Japan discovered the breach and blocked access, then suspended related systems to prevent further exposure.","url":"https://www.aflac.co.jp/static/corp/profile/news/2026/20260630.pdf","by":"Aflac Japan","patch":null},{"at":"2026-06-10","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"Unauthorised access began, according to Aflac Japan’s subsequent investigation. Access occurred repeatedly through 25 June.","url":"https://www.aflac.co.jp/info/yorisou_faq.html","by":"Aflac Japan","patch":null}],"url":"https://hard.fyi/live/aflac-japan-customer-breach-jun-2026/","json":"https://hard.fyi/api/live?id=aflac-japan-customer-breach-jun-2026"}