Aflac’s Tokyo arm, Sapporo, Nidec and KDDI all disclosed data breaches, but the more important question is what the notices do not yet explain: how access, exposure and verification were handled.
Repeated unauthorized access to an insurance policy portal shows how ordinary customer logins can become high-value targets for identity theft, fraud, and downstream abuse.
Aflac’s disclosure around its Japan subsidiary is a reminder that identity data and bank details can turn a localized intrusion into a broader fraud risk, even when the entry point is still unclear.
A sophisticated cyberattack on Aflac exposed personal information of over 22 million people, underscoring a growing threat to the insurance sector.