Insurance giant Aflac discloses data breach after subsidiary hack
Insurance company Aflac disclosed a data breach after hackers compromised a subsidiary's system. The breach exposed personal information of some individuals, though Aflac stated its core systems were not affected and the incident was contained.
Background
- Aflac is a Fortune 500 insurance company best known in the US and Japan for supplemental health insurance (policies that cover things like cancer treatment, accident recovery, or hospital stays on top of regular health insurance). It is famous for its duck mascot in TV commercials.
- The "subsidiary hack" refers to Aflac's majority-owned Japanese subsidiary, Aflac Life Insurance Japan, which disclosed a data breach in July 2024. The breach involved unauthorized access to internal systems — not a ransomware attack, but a security incident that exposed personal information.
- This matters because Aflac is one of the largest insurance companies in the world by market capitalization, and breaches at major insurers are sensitive: they can expose thousands of customers' medical and financial data and trigger regulatory scrutiny in both the US and Japan.
- The incident also highlights a recurring risk in corporate security: a breach at a subsidiary (even one that operates under a different regulatory regime) can become a liability for the entire parent company.