US benefits administrator Navia breached for three weeks; SSNs and other data of 2.69 million people may be exposed

According to GovInfoSecurity, US benefits administrator Navia Benefit Solutions reported a breach affecting 2.69 million people; it discovered suspicious activity on January 23 and found an attacker accessed and potentially acquired data between December 22, 2025 and January 15, 2026 ^[1]. According to the same report, data includes names, birth dates, Social Security numbers, phone numbers, emails and health plan information; according to TechRepublic, Navia began mailing notices on March 18 ^[1][2]. Recipients can activate 12 months of free Kroll identity protection and credit monitoring with the code in their letter ^[2].

Industries mainly affected: Healthcare, Professional services

1. If you received a letter, activate free Kroll monitoring at enroll.krollmonitoring.com/redeem with the code provided ^[2].