Business Context and Reporting Period
This Form 8-K is filed by Aflac Incorporated for the reporting period ending June 30, 2026. The filing addresses a cybersecurity incident involving Aflac Life Insurance Japan Ltd. (Aflac Japan), a wholly owned subsidiary.
Key Financial Metrics
The filing text does not provide specific values for revenue, profit, cash flow, margins, debt, or liquidity. This report focuses exclusively on a material event rather than periodic financial performance.
Material Changes and Incident Details
- Incident Discovery: On June 25, 2026, Aflac Japan discovered unauthorized third-party access to its systems occurring between June 15, 2026, and June 25, 2026.
- Scope of Impact: The incident is limited to systems in Japan. The Company's systems related to its U.S. business were not accessed.
- Data Compromised: Impacted files contain policy and coverage details, personal information, and bank account information.
- Operational Status: Aflac Japan suspended certain systems to contain the incident but continues to serve policyholders.
Outlook, Risks, and Management Commentary
- Investigation Status: An investigation is ongoing with support from third-party cybersecurity experts. The full scope and ultimate impact are currently unknown.
- Regulatory Actions: Aflac Japan has notified the Japan Financial Services Agency and other relevant authorities. Notifications to affected individuals are intended.
- Risk Factors: Potential risks include legal, reputational, and financial consequences; regulatory inquiries or enforcement actions; litigation; contract terminations; loss of business; and additional costs.
- Forward-Looking Statements: The Company cautions that actual results may differ materially due to the uncertainties surrounding the incident.
Investor Verification Checklist
- Verify the extent of data exposure regarding bank account information and personal details.
- Monitor for updates on regulatory inquiries from the Japan Financial Services Agency.
- Assess potential litigation risks and contract termination clauses triggered by the breach.
- Track the timeline for notifications to affected individuals and policyholders.
- Watch for future disclosures regarding the financial cost of the investigation and remediation.