A class-action lawsuit has been filed against Aflac Inc. which alleges that Aflac failed to adequately protect sensitive customer data, including personally identifiable information (PII) and protected health information (PHI), during a June 2024 data breach. The plaintiff claims that Aflac’s security practices were “impermissibly inadequate." She argues that she now suffers from anxiety over the risk of identity theft and other cyber threats stemming from the exposure of her private information.

This case highlights the potentially severe legal and financial consequences companies face when they neglect to implement strong cybersecurity protocols. Allegations of negligence and failure to comply with federal and state data protection standards could lead not only to significant settlement costs but also to lasting damage to a company’s brand and customer trust. Once again, the breach and its aftermath underscore the critical importance of having robust cybersecurity measures in place to avoid costly litigation and reputational harm. Read more about this story on our LinkedIn page