Navia Data Breach Exposes 2.7 Million People's Info

Navia Benefit Solutions, a U.S.-based administrator of employee benefits programs, has notified nearly 2.7 million individuals that their personal information was compromised in a cybersecurity incident. The breach, which involved unauthorized access to the company's systems from December 22, 2025, to January 15, 2026, was detected on January 23, 2026, according to the company's disclosures.

The incident affected 2,697,540 people whose data was potentially exposed during the intrusion. Navia, founded in 1989 and headquartered in Renton, Washington, provides software and services to more than 10,000 employers nationwide. These include administration of Flexible Spending Accounts, Health Savings Accounts, Health Reimbursement Arrangements, COBRA coverage, commuter benefits, and other healthcare and financial tools for employees.

Upon discovering suspicious activity, Navia immediately launched an investigation to determine the scope of the breach. "On January 23, 2026, Navia discovered suspicious activity related to our environment," the company stated in notifications to affected individuals. "Navia promptly responded and launched an investigation to confirm the nature and scope...