Navia Benefit Solutions has disclosed a data breach affecting approximately 2,697,540 individuals after attackers accessed personal information over several weeks between late 2025 and early 2026.
According to a breach notification filed with the Maine Attorney General’s Office and letters sent to affected individuals, Navia detected suspicious activity within its environment on January 23, 2026. An internal investigation revealed that an unauthorized actor had gained access to its systems and potentially exfiltrated data between December 22, 2025, and January 15, 2026.
The company stated that it launched a forensic investigation immediately after discovering the intrusion, working to determine both the scope of the compromise and the identities of impacted individuals. The review concluded that highly sensitive personal information may have been accessed, including:
- Full names
- Dates of birth
- Social Security numbers
- Phone numbers
- Email addresses
Navia Benefit Solutions is a U.S.-based provider of consumer-directed benefits services, administering programs such as Health Reimbursement Arrangements (HRAs), Flexible Spending Accounts (FSAs), and COBRA benefits. The company works with employers to manage tax-advantaged healthcare and dependent care accounts, meaning it stores a significant volume of employee and benefits-related data.
While the breach exposed core identity data, Navia clarified that no claims data or financial account information were disclosed. However, the compromised dataset may still include benefits-related metadata such as participation details, election dates, and termination dates tied to employer-sponsored plans.
The company reported the incident to federal law enforcement and said it is implementing additional security safeguards and employee training measures in response. It is also notifying relevant regulators, credit reporting agencies, and the U.S. Department of Health and Human Services, as required under HIPAA.
To mitigate risks for affected individuals, Navia is offering 12 months of complimentary identity monitoring and credit protection services through Kroll. Impacted users are being advised to monitor financial statements, obtain free credit reports, and consider placing fraud alerts or credit freezes with major credit bureaus.
Although Navia stated it is not currently aware of misuse of the stolen data, the nature of the exposed information poses a long-term risk of identity theft and fraud.
Leave a Reply