Navia Data Breach Exposes Personal Information of 2.7 Million Individuals

• •Navia's data breach affects 2.7 million individuals, exposing sensitive personal information.
• •The breach occurred between December 22, 2025, and January 15, 2026, with detection on January 23.
• •Affected individuals are offered 12 months of free identity protection and credit monitoring.

Navia Benefit Solutions, Inc. has disclosed a data breach affecting approximately 2.7 million individuals. The breach occurred between December 22, 2025, and January 15, 2026, with suspicious activity detected on January 23, 2026. Unauthorized access allowed hackers to potentially exfiltrate sensitive data, including full names, dates of birth, Social Security Numbers, and contact information. Although claims and financial information were not compromised, the exposed data is sufficient for phishing and social engineering attacks. Navia has taken steps to enhance its security measures and has notified federal law enforcement. Affected individuals will receive 12 months of free identity protection and credit monitoring services from Kroll. As of now, no ransomware group has claimed responsibility for the breach.