Navia Benefit Data Breach Investigation

If you received a letter from Navia Benefit Solutions in March 2026, you are one of nearly 2.7 million people across the United States now dealing with the aftermath of a serious data breach that exposed sensitive personal and health benefits information. Contact our data breach lawyers to learn more about your legal options.

What Happened?

Hackers allegedly gained unauthorized access to Navia's systems on December 22, 2025, and the company did not detect the intrusion until January 23, 2026, by which point the attackers had already accessed and likely taken a significant amount of data. The access window ran from December 22, 2025, through January 15, 2026.

Navia filed a formal report with the Maine Attorney General's Office confirming that 2,697,540 individuals were affected. Individual notification letters began going out on March 18, 2026, meaning many victims went weeks without knowing their data had been compromised.

What Information Was Exposed?

According to Navia's own breach notice, the following types of information may have been accessed and acquired:

• Full name and date of birth
• Social Security number
• Phone number and email address
• Health plan information, including participation in HRAs, FSAs, and COBRA enrollment
• Records dating as far back as 2018

Navia has stated that direct financial account numbers and claims data were not exposed. However, that is cold comfort when Social Security numbers and health plan details are in the hands of unknown actors.

The combination of personal identifiers and health benefits information creates serious risk for affected individuals. Cybersecurity experts note that this type of data is valuable for phishing schemes and medical identity theft.

Your Legal Rights as a Breach Victim

Data breach victims have real legal options, and companies that fail to protect sensitive information can be held accountable. When a breach involving health plan data occurs, affected individuals may be entitled to compensation through a class action lawsuit.

The Lyon Firm has extensive experience representing victims of large-scale data breaches and privacy violations. Our attorneys understand the complexities of data security law and consumer protection, and we have the resources to take on corporate defendants regardless of their size.

We offer free, confidential consultations to help you understand your options. There is no fee unless we win your case.