FOLLOW US

A high-stakes legal battle over an alleged Aflac Inc. data breach took a decisive turn Wednesday after a Georgia federal judge appointed a six-member leadership team of prominent law firms to steer the proposed class action forward.

U.S. District Judge Clay D. Land announced that the consolidated lawsuit — combining nearly two dozen individual suits filed after a major cyberattack against the insurance giant — will be led by attorneys from Milberg Coleman Bryson Phillips Grossman PLLC, Beasley Allen Law Firm, and Morgan & Morgan PA, among others.

Also named to the powerhouse leadership roster are Pope McGlamry Kilpatrick Morrison & Norwood PC, Kopelowitz Ostrow PA, and Gibson Consumer Law Group. The appointment, detailed in Judge Land’s Wednesday order, sets the stage for one of the year’s most closely watched data privacy cases.

A Consolidated Class Action Rooted in a “Sophisticated” Cyberattack

The suits were unified in July under lead plaintiff Eleanor Griffin, who alleges that Aflac was hacked in June by a “sophisticated cybercrime group,” resulting in the unauthorized exposure of sensitive customer data.

According to the complaint, Aflac’s failure to implement robust cybersecurity protections led directly to the breach — compromising names, Social Security numbers, and other personal information of thousands of customers.

“The data breach was a direct result of the defendant’s failure to implement adequate and reasonable cybersecurity procedures and protocols,” Griffin asserted. “As a result, plaintiffs and class members are now at a current, imminent, and ongoing risk of fraud and identity theft.”

Claims of Negligence and Calls for Cybersecurity Reform

The consolidated suit accuses Aflac of negligence, breach of implied contract, and unjust enrichment, alleging that the insurer failed to safeguard customer data despite its contractual and fiduciary obligations.

Plaintiffs are seeking monetary damages as well as sweeping reforms to Aflac’s cybersecurity infrastructure — measures they argue are necessary to prevent future breaches.

Judge Land’s order gives the newly appointed leadership team 60 days to file an amended complaint, marking the next major step in the litigation.

A Legal and Corporate Battle with High Stakes

The case underscores a growing wave of data privacy litigation confronting corporate America as consumers demand accountability for cybersecurity failures. Aflac, headquartered in Columbus, Georgia, has yet to publicly comment on the alleged breach or the court’s latest order.

With six major firms now joining forces to lead the Aflac Data Breach Suit, the insurer faces an aggressive legal offensive that could reshape how financial and insurance institutions handle customer data security going forward.

As cyberattacks become more sophisticated and frequent, this case could become a benchmark for corporate responsibility in the digital era — and a costly reminder that even Fortune 500 companies are not immune to the fallout of a single breach.