Aflac Incorporated (NYSE: AFL) disclosed that its wholly owned Japanese subsidiary, Aflac Life Insurance Japan Ltd., experienced an unauthorized third-party intrusion into certain of its systems between June 15 and June 25, 2026.

Aflac Japan discovered the unlawful access on June 25, 2026, and subsequently suspended certain systems to contain the incident. The subsidiary said it continues to serve policyholders despite the system suspensions.

An ongoing investigation has determined that certain compromised files contain policy and coverage details, personal information, and bank account information. Aflac Japan has notified the Japan Financial Services Agency and other relevant authorities, and said it intends to notify affected individuals.

The company said it has engaged third-party cybersecurity experts to support the response effort. Aflac stated the incident is limited to systems in Japan and that its U.S. business systems were not accessed. The full scope and potential impact of the breach remain unknown at this time, according to the company.