Aflac said it identified unauthorized access to its network on June 12, 2025. The company said it promptly initiated its cybersecurity incident response protocols and believes it contained the intrusion within hours.

1. 01

   Aflac said it identified unauthorized access to its network on June 12, 2025. The company said it promptly initiated its cybersecurity incident response protocols and believes it contained the intrusion within hours.

2. 02

   Aflac said its business remains operational and its systems were not affected by ransomware. It said it can underwrite policies, review claims and otherwise serve customers as usual. The company also said it has engaged outside cybersecurity experts.

3. 03

   The company said its review of potentially affected files is at an early stage. It said the files include claims information, health information and social security numbers for customers, beneficiaries, employees and agents in its U.S. business. It said the total number of affected individuals cannot be determined until the review is complete.

4. 04

   Aflac said it expects to notify regulators and provide appropriate notices to affected individuals. It said affected individuals will be offered free credit monitoring and identity theft protection services. The company also said the full scope and ultimate impact of the incident on it are not known at this time.

Analysis scope · Filing bodyWe analyzed the filing body and confirmed exhibits. This is not a review of other exhibits, investor presentations or the full earnings call.

AI summarized the filing and translated the summary into English; it may differ from the original. For reference only, not investment advice. AI translated the published Korean report into English. Figures are copied as filed, not recalculated.

Original filing

The filing as submitted to SEC EDGAR. You can check the figures and statements of this summary against it.