Latest / California / September 2018
Aflac
Aflac notified California AG on Sep 28, 2018 of a data breach, which occurred on May 9, 2018. Data exposed: Social Security number, Medical / health information, Date of birth, Postal address, Name.
All 4 filings by Aflac, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)
- Organization
- Aflac
- Source
- California AG · source record
- Date reported
- Sep 28, 2018
- Date(s) of breach
- Friday, September 8, 2017Wednesday, May 9, 2018
- Residents affected
- Not published by this source
- Data exposed
- Social Security number Medical / health information Date of birth Postal address Name
- Notice letter
- Sample notice (PDF)
- Discovered
- Aug 2, 2018, as stated in the letter"On August 2, 2018, for some sales agents’ accounts, Aflac determined that further tools and analysis could not conclusively rule out access to the accounts."
- Days to notice
- 57 days from discovery (Aug 2, 2018) to the California record (Sep 28, 2018). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
- Offered in the letter
- 12 months of credit or identity monitoring through Experian
- Third party
- The letter attributes the incident to a vendor or service provider
- First seen by BreachTally
- 2026-10-30 16:14 UTC
Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.
Other filings by Aflac
| Organization | State | Reported | Residents affected |
|---|---|---|---|
| Aflac Incorporated | TX | Dec 22, 2025 | 2,055,982 |
| Aflac Incorporated | CA | Dec 19, 2025 | Not published |
| Aflac Incorporated | OR | Jul 11, 2025 | 1 |
Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.