Navia Benefit Solutions naviabenefits.com Navia Benefit Solutions data breach: what happened and what to do
Attackers were inside Navia Benefit Solutions' systems from December 22, 2025 to January 15, 2026. Its Maine filing lists 2,697,540 people. Names, birth dates, Social Security numbers and contact details were involved.
View all 13,115 breaches- Breach date
- 22 Dec 2025
- Affected
- 2,697,540
- Data exposed
- Names, Dates of birth, Social security numbers, Phone numbers, Email addresses
- Last updated
What happened
Navia Benefit Solutions administers employee benefits for employers: health reimbursement arrangements (HRAs), flexible spending accounts (FSAs) and COBRA. It flagged suspicious activity on January 23, 2026. Investigators found that attackers had access from December 22, 2025 to January 15, 2026.
The company's Maine Attorney General filing lists 2,697,540 people, as reported by Security Affairs. Federal HHS data showed a lower figure of 2,151,330. Regulators have reported the count differently, so use the Maine figure as the current total.
Reported data includes names, dates of birth, Social Security numbers, phone numbers and email addresses, plus participation in HRAs, FSAs and COBRA. One report says financial account numbers and medical claims data weren't compromised.
You may be affected without ever having heard of Navia, because your employer chose it. A Social Security number with a birth date is enough to attempt identity theft. Benefits details also help scammers pose as your HR team.
A notice went on Navia's website on March 13, 2026. Letters began mailing on March 18. Navia offers 12 months of credit monitoring and identity protection.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze is free and stops anyone opening new credit in your name. Set it up at Equifax, Experian and TransUnion. Lift it only when you apply for credit yourself.
- 2
Use the free credit monitoring if you were offered it
Navia is offering 12 months of credit monitoring and identity protection. Sign up with the code in your letter before it expires, and read your statements for charges you don't recognize.
- 3
Check with your employer's HR
If your employer uses Navia for benefits, ask HR whether you were included, and verify any benefits message through them.
- 4
Expect phishing that mentions the breach
Criminals use real details to sound credible. Don't click links in unexpected emails, texts or calls. Contact the company using the number on its official website.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus keeps monitoring breach databases and the dark web and alerts you when something new turns up.
Frequently asked
Was I affected by the Navia data breach?
Navia began mailing letters on March 18, 2026. If your employer used Navia for HRAs, FSAs or COBRA, look for one.
What was exposed?
Names, dates of birth, Social Security numbers, phone numbers and email addresses, plus which benefit plans you took part in.
Should I freeze my credit?
If your Social Security number was involved, yes. It's free. It blocks new accounts in your name.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
