HackingFinancial ServicesHealthcareHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Navia Benefit Solutions, Inc.
bd_66f47ef5b3b4b5ef · schema v1 · pii pii-v1
Full breach record for Navia Benefit Solutions, Inc. →Navia Benefit Solutions (benefit administration) reported an external breach: unauthorized actor accessed and acquired PII/PHI between Dec 22, 2025 and Jan 15, 2026; discovered Jan 23, 2026. Data: name, DOB, SSN, phone, email, health plan participation. 833 ME residents affected (2,697,540 total). Kroll credit monitoring/identity restoration offered for 12 months.
Maine clockDiscovered Jan 23, 2026 → Filed with AG Mar 18, 202654d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 14 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_0c9adf1c54ef13f5Vermont State AGfiled 2026-03-18Candidate
- bd_19b19fa6294fd428New Hampshire State AGfiled 2026-03-18Verified
- bd_4c79396a99036546HHS OCRfiled 2026-03-18Candidate
- bd_80d300d85996db11Washington State AGfiled 2026-03-18Verified
Show 6 more filings ↓Show fewer ↑up to 12d gap
- bd_a686e7254f7a3644Delaware State AGfiled 2026-03-18Verified
- bd_3a19611a035e6141Texas State AGfiled 2026-03-20(2d gap)Verified
- bd_1327b0f8f436b5ebVermont State AGfiled 2026-03-23(5d gap)Candidate
- bd_46937c0f13e509b6Washington State AGfiled 2026-03-23(5d gap)Verified
- bd_7e58946c463fbc0eMaine State AGfiled 2026-03-23(5d gap)Verified
- bd_7682fb52f3657c51New Hampshire State AGfiled 2026-03-30(12d gap)Verified
Showing first 10 of 13 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/584caa6c-4397-49c0-89a5-dbc0dbea0948.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2026
- Raw hash
- 58de267512c3a6fd77590b04d78a898f4d417cbbb0eb5c6095be9fbe27ce44cd
Reporting entity
- Name
- Navia Benefit Solutions, Inc.norm: navia benefit
- Domain
- naviabenefits.com
- Industry
- Benefit Administration / Health Plan Administration
Victim entity
- Name
- Navia Benefit Solutions, Inc.norm: navia benefit
- Domain
- naviabenefits.com
- Industry
- Benefit Administration / Health Plan Administration
- Industry
- Financial ServicesllmHealthcarellm
Incident
- Discovered
- Jan 23, 2026
- Materiality determined
- —
- Notification sent
- Mar 18, 2026
- Affected individuals
- 833
- Data types
- PIIPHIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Federal law enforcement notifiedU.S. Department of Health and Human Services notified pursuant to HIPAAApplicable state and federal regulators notified
Compliance
- Time to disclose
- 8 weeks(54 days from discovery to filing)
- Compliance flags
- ME AG >30d · 54d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 23, 2026→ Filed with AG: Mar 18, 202654d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.