> JapanHacked_
[Contained][Severity: Critical][Web app exploit]

Aflac Life Insurance Japan: unauthorized access to online systems

On 30 June, Aflac Life Insurance Japan disclosed unauthorized access to its Online Consultation system and the Aflac Yorisou Net system used by its agencies. It detected the access on 25 June from rising CPU load and stopped the systems; the first leak was on 10 June. Its findings of 31 July said access and data queries were not controlled well enough and bulk queries were not monitored. Names, birth dates, genders, addresses, phone numbers and policy details of about 4.4 million customers (bank details for about 220,000 of them) and data on about 40,000 agencies leaked. Yorisou Net was mostly back on 28 September.

Disclosed

2026-06-30

Organizations involved

1

Leaked or at risk

4.4M

4,400,000

Downtime

Unknown

Timeline

  1. Started 2026-06-10
  2. Detected 2026-06-25
  3. Disclosed 2026-06-30
  4. 20 days

Attack or cause

Method
[Web app exploit]
Impact
[Data leak][Service outage]
Entry point
Web app

Data exposed or at risk

[Name][Date of birth][Gender][Postal address][Phone number][Bank account]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][Official]当社システムに対する不正アクセスの発生 および情報漏えいに関する調査結果と再発防止策についてAflac Life Insurance Japan · 2026-07-31
  2. [2][Official]当社システムに対する不正アクセスの発生 および情報漏えいに関するお詫びとお知らせAflac Life Insurance Japan · 2026-06-30