Navia Benefit Solutions breach exposes data of 2.7 million individuals

According to Bleeping Computer, Navia Benefit Solutions, Inc. is notifying approximately 2.7 million individuals about a significant data breach that compromised their sensitive personal information.

The breach impacted Navia's systems between December 22, 2025, and January 15, 2026, with suspicious activity discovered on January 23. An unauthorized actor gained access to and potentially exfiltrated data including full names, dates of birth, Social Security Numbers, phone numbers, email addresses, and details about participation in Health Reimbursement Arrangements (HRA), Flexible Spending Accounts (FSA), and Consolidated Omnibus Budget Reconciliation Act (COBRA) enrollment. While Navia stated that claims or financial information were not exposed, the compromised data is sufficient for threat actors to conduct phishing and social engineering attacks.

Navia has implemented measures to enhance its security posture and data retention policies, and has notified federal law enforcement. Affected individuals are being offered 12 months of free identity protection and credit monitoring services from Kroll.

Source: Bleeping Computer