Navia Data Breach Impacts 2.7 Million Users

Navia Benefit Solutions has disclosed additional details about a recently confirmed data breach, revealing that attackers had unauthorized access to its systems for several weeks before the incident was detected. According to the company, suspicious activity was identified on January 23, 2026, but subsequent investigation determined that the breach occurred in 2026.

During this period, threat actors were able to access and likely exfiltrate sensitive personal and health-related information. The compromised data includes names, dates of birth, Social Security numbers, phone numbers, email addresses, and details related to health plan participation.

In its official notification, Navia stated that its response efforts included securing affected systems, analyzing impacted data to determine the scope of exposure, and notifying individuals who may have been affected. Where address information was available, impacted individuals were informed via mailed letters. The company has reported to the Maine Attorney General’s Office that approximately 2,697,540 individuals were potentially impacted by the breach, making it one of the more significant data exposure incidents in the benefits administration sector As part of its response, Navia is offering affected individuals 12 months of complimentary identity theft protection and credit monitoring services. The company has also advised customers to remain alert for signs of fraud, regularly review financial statements, and monitor credit reports for suspicious activity or inaccuracies.