Navia Profit Options, Inc. (Navia) is informing almost 2.7 million people of an information breach that uncovered their delicate info to attackers.
An investigation into the incident revealed that the hackers had entry to the group’s methods between December 22, 2025, and January 15, 2026. Nonetheless, the corporate found the suspicious exercise on January 23.
Navia says that it responded instantly and launched an inquiry to find out the potential impression of the incident.
“The investigation decided that an unauthorized actor accessed and bought sure info between December 22, 2025, and January 15, 2026,” the corporate says within the notification to impacted people.
Navia is a consumer-focused administrator of advantages that gives companies to greater than 10,000 employers throughout the U.S.
The corporate supplies software program and buyer companies for the administration of Versatile Spending Accounts (FSA), Well being Financial savings Accounts (HSA), Well being Reimbursement Preparations (HRA), Commuter Advantages and COBRA Companies.
It additionally helps deal with commuter advantages, way of life accounts, schooling advantages, compliance/threat companies, and retirement-related choices.
In accordance with the corporate, the investigation into the breach revealed that the hacker accessed and should have exfiltrated the next forms of information:
- Full title
- Date of start
- Social Safety Quantity (SSN)
- Telephone quantity
- Electronic mail tackle
- Participation in HRA (Well being Reimbursement Preparations)
- FSA (Versatile Spending Accounts) info
- Consolidated Omnibus Price range Reconciliation Act (COBRA) enrollment info
Navia underlines that the info breach didn’t expose particulars about claims or monetary info. However, the uncovered information is sufficient for menace actors to deploy phishing and social engineering assaults geared toward affected people.
The corporate states that it has reviewed its safety posture and information retention insurance policies to determine potential weaknesses that may be improved, and has notified federal regulation enforcement concerning the incident.
Clients whose info was uncovered will likely be lined by a free 12-month id safety and credit score monitoring service from Kroll. Letter recipients are additionally inspired to think about inserting a fraud alert and safety freeze on their credit score information.
On the time of writing, no ransomware group has claimed the Navia information breach.
Malware is getting smarter. The Purple Report 2026 reveals how new threats use math to detect sandboxes and conceal in plain sight.
Obtain our evaluation of 1.1 million malicious samples to uncover the highest 10 strategies and see in case your safety stack is blinded.
