Navia Confirms Data Breach Exposing Sensitive Information of 2.7 Million Users

Navia Benefit Solutions confirmed an API-based data breach affecting ~2.7 million current and former plan participants dating back to 2018; exposed data includes names, dates of birth, addresses, emails, phone numbers, Social Security numbers, Navia IDs, and benefit enrollment/termination details. Navia patched the API flaw, engaged external forensics and law enforcement, notified affected employers and regulators, and is offering 12 months of identity protection and credit monitoring while strengthening authentication controls.