Navia Profit Options, Inc. (Navia) is informing almost 2.7 million people of a knowledge breach that uncovered their delicate data to attackers.
An investigation into the incident revealed that the hackers had entry to the group’s programs between December 22, 2025, and January 15, 2026. Nonetheless, the corporate found the suspicious exercise on January 23.
Navia says that it responded instantly and launched an inquiry to find out the potential impression of the incident.
“The investigation decided that an unauthorized actor accessed and bought sure data between December 22, 2025, and January 15, 2026,” the corporate says within the notification to impacted people.
Navia is a consumer-focused administrator of advantages that gives companies to greater than 10,000 employers throughout the U.S.
The corporate offers software program and buyer companies for the administration of Versatile Spending Accounts (FSA), Well being Financial savings Accounts (HSA), Well being Reimbursement Preparations (HRA), Commuter Advantages and COBRA Companies.
It additionally helps deal with commuter advantages, life-style accounts, training advantages, compliance/danger companies, and retirement-related choices.
In keeping with the corporate, the investigation into the breach revealed that the hacker accessed and should have exfiltrated the next varieties of knowledge:
- Full identify
- Date of delivery
- Social Safety Quantity (SSN)
- Cellphone quantity
- E-mail handle
- Participation in HRA (Well being Reimbursement Preparations)
- FSA (Versatile Spending Accounts) data
- Consolidated Omnibus Price range Reconciliation Act (COBRA) enrollment data
Navia underlines that the info breach didn’t expose particulars about claims or monetary data. However, the uncovered knowledge is sufficient for menace actors to deploy phishing and social engineering assaults geared toward affected people.
The corporate states that it has reviewed its safety posture and knowledge retention insurance policies to establish potential weaknesses that may be improved, and has notified federal legislation enforcement in regards to the incident.
Clients whose data was uncovered can be lined by a free 12-month id safety and credit score monitoring service from Kroll. Letter recipients are additionally inspired to think about inserting a fraud alert and safety freeze on their credit score information.
On the time of writing, no ransomware group has claimed the Navia knowledge breach.
Malware is getting smarter. The Crimson Report 2026 reveals how new threats use math to detect sandboxes and conceal in plain sight.
Obtain our evaluation of 1.1 million malicious samples to uncover the highest 10 strategies and see in case your safety stack is blinded.
