Aflac Life Insurance announced on June 30 that systems including the customer-exclusive website “Aflac Yorisounet” had been accessed without authorization by a third party, resulting in the leak of some information, including customers’ personal information. Approximately 4.38 million people were affected. As of the present, the company said no improper use of the leaked information or similar misuse had been identified.
Timeline from the occurrence of unauthorized access to the discovery of the leak (Source: press release; same below)
The leaked customer personal information includes names, dates of birth, gender, addresses, telephone numbers, policy numbers, coverage details, and other information. In addition, premium-payment account information—such as financial institution names, branch names, deposit types, account numbers, and account-holder names—was leaked for approximately 230,000 customers. The company says that My Number and credit card information were not included. Separately from the customer information, information such as the names and addresses of representatives and telephone numbers of approximately 40,000 insurance agencies was also leaked.
Breakdown of the categories and counts of leaked personal information (some images edited)
The information leak was discovered on June 25. On the same day, the unauthorized access was blocked, and related systems were shut down to prevent the damage from spreading. Subsequent investigation found that the unauthorized access first occurred on June 15 and that unauthorized access took place multiple times through June 25. The details of the cause are still under investigation.
Various inquiries and procedures, including claims for insurance benefits and other benefits, will continue to be accepted as usual through call centers and other channels. Aflac Life Insurance explained that it has already reported this matter to relevant authorities, including the Financial Services Agency and the police. It will continue investigating and work toward early restoration of the systems.
The company said it will send written apologies and notifications to the affected customers in due course.
