Aflac Inc.: Aflac Loses Bid to Dismiss Lawsuit Over Massive 2025 Data Breach

Aflac Faces Class Action Lawsuit Over 2025 Data Breach Affecting 23 Million

A federal court has allowed a proposed class action lawsuit against Aflac Inc. to proceed, rejecting the insurance giant’s attempt to dismiss claims over a 2025 data breach that exposed the personal information of nearly 23 million individuals. In a ruling issued by Judge Clay D. Land of the U.S. District Court for the Middle District of Georgia, the plaintiffs successfully established legal standing, alleging negligence, breach of implied contract, unjust enrichment, and seeking declaratory judgment.

While Aflac argued that the plaintiffs failed to demonstrate concrete harm under Georgia law, Judge Land determined that their allegations were sufficient to move the case forward. The breach, which occurred in 2025, has raised concerns over the company’s data security practices and the potential long-term risks for affected individuals.

The decision marks a significant development in data breach litigation, as courts continue to grapple with the legal thresholds for standing and injury in cases involving large-scale cyber incidents. Aflac, a major player in the insurance industry, now faces the prospect of a protracted legal battle as the case advances.

Source: https://news.bloomberglaw.com/business-and-practice/aflac-loses-bid-to-dismiss-lawsuit-over-massive-2025-data-breach

Aflac cybersecurity rating report: https://www.rankiteo.com/company/aflac

"id": "AFL1786654528",
"linkid": "aflac",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '23 million',
                        'industry': 'Insurance',
                        'name': 'Aflac Inc.',
                        'type': 'Insurance Company'}],
 'data_breach': {'number_of_records_exposed': '23 million',
                 'personally_identifiable_information': 'Yes',
                 'type_of_data_compromised': 'Personal information'},
 'date_publicly_disclosed': '2025',
 'description': 'A federal court has allowed a proposed class action lawsuit '
                'against Aflac Inc. to proceed, rejecting the insurance '
                'giant’s attempt to dismiss claims over a 2025 data breach '
                'that exposed the personal information of nearly 23 million '
                'individuals. The breach has raised concerns over the '
                'company’s data security practices and the potential long-term '
                'risks for affected individuals.',
 'impact': {'brand_reputation_impact': 'Raised concerns over data security '
                                       'practices',
            'data_compromised': 'Personal information of nearly 23 million '
                                'individuals',
            'identity_theft_risk': 'Potential long-term risks for affected '
                                   'individuals',
            'legal_liabilities': 'Class action lawsuit'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'U.S. District Court for the Middle District of '
                           'Georgia'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
 'title': 'Aflac Faces Class Action Lawsuit Over 2025 Data Breach Affecting 23 '
          'Million',
 'type': 'Data Breach'}