DisclosureLens
HackingTechnologyInformationSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)CriticalContained

Branch Metrics, Inc.

bd_cf861bb0159dc06e · schema v1 · pii pii-v1

Severity

Critical

Discovered

Mar 27, 2026

Filed

Apr 10, 2026

To disclose

14 days

Affected · nationwide

2,700,0006 in this filing

Linked

3 filings

Confidence

64%
Full breach record for Branch Metrics, Inc.

Branch Metrics, Inc. notified Massachusetts residents that their personal information was accessed via a third-party vendor, Navia Benefit Solutions, Inc., which administers Branch's COBRA benefits. An unauthorized actor accessed Navia's systems between December 22, 2025, and January 15, 2026. Branch became aware of the incident on March 27, 2026. Affected data includes names, dates of birth, Social Security numbers, phone numbers, email addresses, and limited health plan enrollment information. Approximately 2.7 million individuals across Navia's client base were affected. Navia is providing identity monitoring services.

Massachusetts clock MA AG ≤30d14 days discovery → filing

Incident timeline

undetected · 95 days
discovery → filing · 14 days

Dec 22, 2025

Begins

Mar 27, 2026

Discovered

Apr 10, 2026

Filed

vs. sector median

17 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Indiana State AGApr 6 · first
Massachusetts State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.