Navia Profit Options, Inc. (Navia) is informing almost 2.7 million people of a knowledge breach that uncovered their delicate info to attackers.
An investigation into the incident revealed that the hackers had entry to the group’s methods between December 22, 2025, and January 15, 2026. Nevertheless, the corporate found the suspicious exercise on January 23.
Navia says that it responded instantly and launched an inquiry to find out the potential influence of the incident.
“The investigation decided that an unauthorized actor accessed and purchased sure info between December 22, 2025, and January 15, 2026,” the corporate says within the notification to impacted people.
Navia is a consumer-focused administrator of advantages that gives companies to greater than 10,000 employers throughout the U.S.
The corporate offers software program and buyer companies for the administration of Versatile Spending Accounts (FSA), Well being Financial savings Accounts (HSA), Well being Reimbursement Preparations (HRA), Commuter Advantages and COBRA Companies.
It additionally helps deal with commuter advantages, life-style accounts, training advantages, compliance/threat companies, and retirement-related choices.
In response to the corporate, the investigation into the breach revealed that the hacker accessed and will have exfiltrated the next varieties of knowledge:
- Full identify
- Date of beginning
- Social Safety Quantity (SSN)
- Telephone quantity
- Electronic mail deal with
- Participation in HRA (Well being Reimbursement Preparations)
- FSA (Versatile Spending Accounts) info
- Consolidated Omnibus Funds Reconciliation Act (COBRA) enrollment info
Navia underlines that the information breach didn’t expose particulars about claims or monetary info. However, the uncovered knowledge is sufficient for menace actors to deploy phishing and social engineering assaults aimed toward affected people.
The corporate states that it has reviewed its safety posture and knowledge retention insurance policies to establish potential weaknesses that may be improved, and has notified federal regulation enforcement concerning the incident.
Clients whose info was uncovered can be coated by a free 12-month id safety and credit score monitoring service from Kroll. Letter recipients are additionally inspired to think about putting a fraud alert and safety freeze on their credit score recordsdata.
On the time of writing, no ransomware group has claimed the Navia knowledge breach.
Malware is getting smarter. The Pink Report 2026 reveals how new threats use math to detect sandboxes and conceal in plain sight.
Obtain our evaluation of 1.1 million malicious samples to uncover the highest 10 methods and see in case your safety stack is blinded.
