Aflac notifies 22.6 million people of June data theft attack

Aflac, the largest U.S. supplemental health insurance provider, is notifying 22.65 million people whose sensitive health and personal information, including Social Security numbers, was potentially compromised in a June data theft incident.

As of Friday, Aflac’s count for the number of people affected by the breach was not yet posted on the U.S. Department of Health and Human Services’ HIPAA Breach Reporting Tool website, which lists health data breaches affecting 500 or more individuals. Aflac submitted a HIPAA breach report about the incident to HHS’ Office for Civil Rights in August with a placeholder estimate of 500 people affected.

When and if the HHS OCR’s website is updated with Aflac’s latest estimate of 22.65 million people, the hacking incident will likely rank as the largest health data breach reported to U.S. federal regulators in 2025.

Read more at Healthcare Info Security